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A I  QA  |U  AMD  liruio  OrpTIflU  B  C'sco  sw'relessLAN  gear  has  a  tough  time  handling  VoIP  calls,  users  say.  PAOEjS 

lUll  *  Some  users  yawn  at  the  prospect  of  Microsoft  releasing  an  update  to  Windows  Server  2003.  PAGE  16 


To  Adjust  Plans 

Microsoft  postpones  shipment  again,  to  2005 


BY  MARC  L.  SONGINI 
AND  CAROL  SLIWA 

Microsoft  Corp.  last 
week  pushed  back  the 
release  date  of  its  Yu¬ 
kon  upgrade  to  SQL 
Server  for  the  third  time,  forc¬ 
ing  some  users  of  the  database 
to  modify  deployment  plans 
and  leaving  others  unhappy 
about  the  extended  wait  for 
needed  functionality. 

Microsoft’s  latest  plan  had 
been  to  ship  Yukon  by  year’s 


end.  But  company  offi¬ 
cials  decided  to  add  a 
third  beta-test  release, 
which  will  delay  ship¬ 
ments  by  as  much  as 
six  months.  The  deci¬ 
sion  to  wait  until  the  first  half 
of  2005  also  affects  the  next 
version  of  Microsoft’s  Visual 
Studio  .Net  development 
tools,  code-named  Whidbey. 

“I’m  stunned,”  said  Keith 
Gilbert,  an  enterprise  data  ar- 
SQL  Server,  page  53 


Yukon’s  slippage 
loudens  Software 
Assurance  gripes. 
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Premier  100  Conference 


IT  LEADERS  2004 


■  INSIDE:  Coverage  begins  on  Page  E.  The  passion  on 
display  struck  Maryfran  Johnson.  Editorial,  3age  20. 

■  BEST  IN  CLASS:  Our  special  Premier  100  supple¬ 
ment  appears  between  Pages  20  and  21. 

■  ONLINE:  Full  coverage  of  what  nearly  500  IT 
executives  experienced  on-site.  3  QuickLink  a410Q 
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Compliance 

Headaches 
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A  patchwork 
of  vaguely 
worded  pri¬ 
vacy  laws  makes  it  tough 
for  IT  to  do  the  right  thing, 
and  outsourcing  makes  it 
hard  to  control  what  hap¬ 
pens  to  personal  data. 
Stories  begin  on  Page  35. 
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How  well  do  you  know  the  rules 
responsible  information  handling? 

k  QuickLink  45268 
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Diversity  in  IT  Supply  Chain  Pays  Off,  CIOs  Say 


Tapping  suppliers  that  are  owned  by  women  or 
minorities  can  expand  skill  set,  customer  base 


BY  JAIKUMAR  VIJAYAN 

CHICAGO 

Using  small  suppliers  or  com¬ 
panies  owned  by  women  or 
minorities  in  the  IT  supply 
chain  can  give  buyers  better 
access  to  specialized  skills  and 
more  opportunities  for  cost 
reduction,  said  CIOs  from  sev¬ 
eral  large  organizations  at  a 
conference  here  last  week. 

Having  a  diverse  supplier 
base  can  also  help  attract  and 


Benefits  of  Diversity 

CIOs  say  buying  from  small 
and  minority-owned  tech¬ 
nology  companies  can  yield: 

■  Lower  costs 

■  Better  access  to 
specialized  skills 

■  More  involvement 
with  and  commitment 
to  projects 

V  (ft 


serve  customers  with  a  wide 
range  of  backgrounds,  added 
the  CIOs,  who  were  attending 
a  conference  organized  by 
The  Alliance  of  Business 
Leaders  and  Entrepreneurs 
and  Crain’s  Chicago  Business. 

Supporting  diversity  in  the 
supply  chain  yields  “smaller, 
more  agile  and  flexible  com¬ 
panies  focused  on  providing 
premium  customer  satisfac¬ 
tion,”  said  James  Burdiss,  CIO 
at  $7.7  billion  Smurfit-Stone 
Container  Corp.  in  Alton,  Ill. 

Diversity,  page  16 
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Finally,  the  technology  of  a  supercomputer  at  a  breakthrough  price.  It’s  here  in  our  newest  IBM  eServer  BladeCenter 
server*  The  BladeCenter  JS20  is  powered  by  the  same  chip  technology  that  drives  some  of  the  world’s  fastest 
supercomputers  -  the  innovative  POWER™  architecture  -  yet  it’s  designed  to  be  affordable.  Very  affordable.  Plus, 
BladeCenter  JS20  servers  thrive  in  both  32-  and  64-bit  environments.  And  when  slipped  into  a  complete  BladeCenter 
system,  voila,  a  single  interface  integrates  your  servers,  network  and  storage.  So  do  what  the  on  demand  world 
demands:  simplify  -  and  advance  -  your  infrastructure.  For  more  information,  visit  ibm.com/eserver/blade 


Get  all  this  only  with  IBM  eServer ™  BladeCenter ™  systems  and  JS20  blades. 


Consolidate  multiple  applications/ 

Run  Linux  in  both  32- 

Proven,  time-tested 

Over  80%  fewer  cables 

Scale  out  (simply) 

workloads  to  reduce  TCO. 

and  64-bit  environments. 

POWER  architecture. 

than  stand-alone  servers. 

on  demand. 

(e)  server’ 

- - - 


The  BladeCenter  JS20f  is  powered  by  advanced  POWER 
processor  technology.  (Slide  it  into  the  BladeCenter  system 
and  you’ve  got  the  power  to  advance  your  business.) 


‘Operating  system  and  BladeCenter  chassis  sold  separately.'BladeCenter  system  with  generic  blades  depicted  above.  IBM,  the  e-business  logo,  eServer,  the  eServer  logo,  BladeCenter,  POWER  and  PowerPC  are 
trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks 
of  others.  ©2004  IBM  Corporation.  All  rights  reserved. 


The  right  management  should  do  more  than  just  protect. 
It  should  also  enable. 


eTrust™  Security  Management  Software 


With  eTrust  security  management  software,  your  information  isn't  just  safeguarded  from  internal  and  external  threats. 
We  provide  authorized  customers,  partners,  and  employees  with  appropriate  access  that  can  help  your  business  grow. 
In  addition  to  securing  data,  eTrust  also  provides  a  single  view  of  your  security  environment,  so  you  can  make  real-time 
decisions  based  on  comprehensive  information.  If  you're  looking  for  ways  to  minimize  risk  while  maximizing  your 
potential,  or  to  get  a  white  paper,  go  to  ca.com/security. 


Computer  Associates® 


©  2003  Computer  Associates  International,  Inc.  (CA).  All  rights  reserved. 
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Refreshing  the  Desktop 

In  the  Technology  section:  Companies  are  making 
decisions  about  when  to  upgrade  PCs  rather  than 
replace  them  and  how  to  use  a  round  of  purchases 
to  drive  down  long-term  support  costs  while  boost¬ 
ing  business  benefits.  Page  23 
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Data  Stewards  Seek  Conformity 

In  the  Management  section:  They  have  a 
variety  of  titles,  but  these  data  administra¬ 
tors  straddle  the  worlds  of  IT  and  business 
to  ensure  data  quality  and  standardization. 

Page  27 


SPECIAL  COVERAGE 


IT  LEADERS  2004 

Our  Premier  100  conference 
featured  a  spirited  debate  over 
IT’s  relevance  and  much  more. 

Stories  begin  on  page  6 


For  full  coverage,  visit  our  Web  site: 
©  QuickLink  a4100 
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10  IBM  announces  a  bundled 
suite  of  storage  software. 

12  Two  vendors  aim  to  cut  the 

cost  of  edge  networking. 

13  Cisco  WLANs  don’t  cut  it 
for  some  voice  users. 

13  SAP  plans  to  unify  its  Net- 
Weaver  middleware  suite. 

16  Microsoft  plans  an  update  of 
Windows  Server  2003. 


OPINIONS 

10  On  the  Mark:  Mark  Hall 

learns  that  the  best  e-com¬ 
merce  search  tool  might  yield 
the  least  information. 

20  Maryfran  Johnson  reminds 
us  that  the  most  successful  IT 
operations  are  driven  by  one 
key  element:  passion. 

20  Pimm  Fox  says  the  people 
who  have  the  answers  you 
need  can  be  hard  to  find,  but 

a  knowledge  management  sys¬ 
tem  can  put  their  expertise  at 
your  fingertips. 

21  Alexander  Katsenelinboigen 

argues  that  new  software 
begets  more  development 
work,  so  if  some  of  that  work 
is  outsourced  overseas,  the 
U.S.  still  stands  to  gain  . . . 

25  . . .  but  Robert  L.  Mitchell 

disagrees.  He  says  that  the 
very  innovations  that  the  IT 
industry  created  are  driving 
IT  jobs  abroad. 

31  Barbara  Gomolski  advises 
IT  leaders  to  rethink  the 
whole  concept  of  strategy 
development. 
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54  Frankly  Speaking:  Frank 
Hayes  is  glad  ISPs  are  fighting 
spammers  in  earnest.  However, 
there  may  be  a  gotcha  for  you 
and  your  work-at-home  users. 
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KNOWLEDGE 
CENTER  PRIVACY 

Compliance  Headaches 

Protecting  consumer  and  em¬ 
ployee  privacy  isn’t  easy  A 
patchwork  of  inconsistent 
and  vague  laws  make  it  tough 
for  IT  to  do  the  right  thing, 
and  the  outsourcing  trend 
means  that  more  data  is  in  the 
hands  of  outside  parties.  This 
special  report 
will  help  you  get 
up  to  speed  on 
the  challenges. 
PACKAGE  BEGINS  ON  PAGE  35. 


41  QuickStudy:  Are  you  confused  by 
the  barrage  of  terms  being  thrown 
around  in  the  privacy  debate?  This 
glossary  might  help. 


SPECIAL 
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40  CPOs:  Hot  or  Not?  New 

privacy-related  regula¬ 
tions  have  resulted  in 
more  chief  privacy  of¬ 
ficers.  Yet  many  of 
these  newly  minted 
CPOs  are  narrowly 
focused  on  regulatory 
compliance  and  are  sim¬ 
ply  adding  privacy  tasks  to 
their  existing  job  functions. 


36  Privacy  Potholes.  IT 

managers  like  Kirk  Herath  of 
Nationwide  Mutual  (left)  offer 
advice  for  avoiding  potholes 
when  complying  with  privacy 
regulations. 

38  Losing  Control.  Here  are  tips  for 
controlling  sensitive  customer 
data  when  it’s  in  the  hands  of 
a  third-party  outsourcer. 


42  The  Almanac:  Bell 
Labs  software  allows 
mobile  phone  users  to 
specify  what  location 
information  they  wish 
to  share,  when,  with 
whom  and  under  what 
criteria.  Plus  other 
research  tidbits  about 
privacy  in  the  Information  Age. 

44  Opinion:  Columnist  Jay  Cline 
says  the  RFID  community  needs 
to  counteract  the  public  hysteria 
about  possible  RFID  privacy 
abuses.  ONLINE:  Read  Cline’s 
views  on  a  variety  of  privacy 
topics,  from  identify  theft 
to  privacy  seals. 

©  QuickLink  a3190. 
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Test  Yourself:  Do  you 

know  the  rules  of  re¬ 
sponsible  information 
handling?  Take  this 
quiz  to  find  out. 

©  QuickLink  45268 

Book  Excerpt:  “Per¬ 
sonalization  plus  pri¬ 
vacy  equals  profit,” 
say  authors  Anna 


Cavoukian  and  Tyler 
Hamilton  in  this  ex¬ 
cerpt  from  Privacy 
Payoff.  ©  QuickLink 
44725 

Book  Excerpt:  in  this 

excerpt  from  Privacy 
For  Business,  Stephen 
Cobb  outlines  five 
crucial  issues  for  Web 


site  managers. 

©  QuickLink  44902 

Opinion:  All  bark  and 
no  bite?  Columnist 
Mark  Willoughby 
weighs  in  on  the  im¬ 
pact  of  California’s 
SB  1386  identity 
protection  bill. 
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If 

So  many  people 
have  debunked  Carr 
before  me  that  I  feel 
like  Elizabeth  Tay¬ 
lor's  ninth  husband: 
I  know  what  to  do, 
but  how  do  I  make 
it  interesting? 

BOB  METCALFE 


Speakers  Clash  in  Spirited 
Debate  Over  IT  Relevance 


BY  KATHLEEN  MELYMUKA 
AND  TODD  R.  WEISS 

PALM  DESERT.  CALIF. 

Does  information 

technology  matter 
anymore?  In  a  sharp 
debate  that  marked 
the  end  of  Day  1  of  Computer- 
world’  s  Premier  100  IT  Leaders 
Conference,  author  Nicholas 
G.  Carr  asserted  that  IT  has 


Companies 
should  have  a  bias 
to  spend  less  year 
over  year  for  IT. 
Follow,  don't  lead. 
Even  small  delays 
can  save  you  lots 
of  money  and  risk. 

NICHOLAS  G.  CARR 


largely  lost  its  ability  to  pro¬ 
vide  companies  with  a  com¬ 
petitive  advantage,  and  Bob 
Metcalfe,  the  inventor  of  Eth¬ 
ernet,  rebutted  Carr’s  views. 

The  users  in  attendance 
were  so  enthralled  by  the 
speakers’  arguments  that  they 
continued  to  question  them 
for  a  half-hour  after  the  ses¬ 
sion  was  scheduled  to  end. 

Carr,  a  former  editor  at  Har¬ 
vard  Business  Review,  began 
by  recounting  his  article  “IT 
Doesn’t  Matter,”  which  ran 
last  year  in  that  publication 
[QuickLink  a3330].  In  the  arti¬ 
cle,  he  argued  that  IT  applica¬ 
tions  and  infrastructure, 
though  essential  to  business 
and  integral  to  business  proc¬ 
esses,  have  become  so  easily 
replicable  that  they  no  longer 
provide  sustainable  competi¬ 
tive  advantage. 

“When  everyone  is  at  parity, 
profit  goes  to  customers,  not 
to  the  bottom  line,”  Carr  said. 

Like  railroads,  telephones 
and  electricity,  IT  has  become 
part  of  the  general  business  in¬ 
frastructure  —  absolutely  nec¬ 
essary  to  compete  but  no 
longer  strategic,  he  said.  Com¬ 
panies  still  don’t  realize  this, 
and  as  a  result,  they  spend 
much  more  aggressively  on  IT 
than  they  should,  Carr  added. 


Today,  Carr  said,  risk  man¬ 
agement  in  IT  is  more  impor¬ 
tant  than  innovation,  and  the 
biggest  risk  is  overspending. 
“Companies  should  have  a  bias 
to  spend  less  year  over  year  for 
IT,”  he  said.  “Follow,  don’t  lead. 
Even  small  delays  can  save  you 
lots  of  money  and  risk.” 

But  Metcalfe,  the  inventor 
of  Ethernet  and  currently  a 
principal  at  Polaris  Venture 
Partners  Inc.  in  Waltham, 
Mass.,  came  out  swinging. 


“Carr  has  called  you  impa¬ 
tient,  sloppy,  wasteful,  lavish 
spenders,  counterproductive 
and  lured  into  passivity  by  a 
chorus  of  hype,”  he  said.  “So 
many  people  have  debunked 
Carr  before  me  that  I  feel  like 
Elizabeth  Taylor’s  ninth  hus¬ 
band:  I  know  what  to  do,  but 
how  do  I  make  it  interesting?” 

Metcalfe  argued  that  IT 
matters  to  the  tune  of  $1.8  tril¬ 
lion  in  IT  spending  in  2003, 
according  to  figures  from  IDC 
in  Framingham,  Mass.  And 
yet,  he  said,  Carr  concludes 
“that  you  people  should  stop 
spending  wildly,  stop  being 
suckers,  stop  squandering  cor¬ 
porate  assets  unless  you  want 
to  end  up  on  some  Sarbanes- 
Oxley  perp  walk.” 

Metcalfe  said  Carr  chose  to 
cite  only  studies  that  support 
his  thesis.  “Studies  have  shown 
that  studies  show  what  they’re 
intended  to  show,”  he  said.  “Be 
suspicious  of  studies.” 

The  unsung  heroes  in  the 
innovation  machine  are  the  IT 
leaders  in  the  Premier  100  au¬ 
dience,  Metcalfe  said.  “If 
Carr’s  advice  is  followed,  how 
will  new  technologies  find 
markets  and  be  perfected? 
Who  will  provide  testbeds?” 

Finally,  he  said,  Carr  is  not 
only  wrong,  but  he’s  also  dan¬ 
gerous  because  “he  has  suc¬ 
ceeded  in  misleading  the  vast 
majority  of  Harvard  Business 
Review  readers,  who  read  only 
the  titles.”  Unless  his  views 


Building  a  Plug-and-Play  IT  Staff 


BY  THOMAS  HOFFMAN 

PALM  DESERT.  CALIF. 

IT  executives  at  many  companies 
are  exploring  ways  to  make  their 
thinly  stretched  staffs  more  modu¬ 
lar  and  responsive  in  order  to 
quickly  move  people  between 
business  units  and  projects. 

Developing  an  agile  IT  staff  “is 
a  significant  challenge  that  we've 
spent  a  lot  of  time  addressing," 
said  Martin  Colburn,  chief  tech¬ 
nology  officer  at  the  National  As¬ 
sociation  of  Securities  Dealers 
Inc.  (NASD)  in  Rockville,  Md.  Col¬ 
burn  was  one  of  several  IT  execu¬ 
tives  who  discussed  IT  staffing  at 
Computerworlcf  s  Premier  100  IT 
Leaders  conference  here  last 


week.  When  Colburn  became 
CTO  for  the  organization  that  reg¬ 
ulates  the  Nasdaq  Stock  Market 
three  years  ago,  his  group  was 
spending  75  to  80  cents  on  main¬ 
tenance  for  every  dollar  spent  on 
application  development,  he  said. 
To  lower  those  costs  and  free  up 
IT  staff,  NASD  last  year  began 
sending  some  application  mainte¬ 
nance  work  off-site,  starting  with 
non-mission-critical  applications. 

As  a  regulator  of  a  securities 
market,  said  Colburn,  NASD  has 
to  develop  nearly  all  of  its  soft¬ 
ware  applications  in-house.  “It's 
not  like  there’s  a  lot  of  off-the- 
shelf  software  we  can  use  to  do 
this,"  he  said.  But  because  NASD 
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are  thoroughly  debunked, 
Metcalfe  said,  “today’s  current 
crop  of  MBAs  will  be  running 
WordPerfect  on  286s,”  and 
American  ingenuity  will  be 
“strangled  in  the  bassinet.” 

The  debate  stirred  a  wide 
range  of  reactions  from  the 
audience. 

Roger  Zakharia,  director  of 
information  systems  for  the 
restaurant  technology  support 
field  service  of  hamburger 
chain  Jack  in  the  Box  Inc.  in 
San  Diego,  said  he  disagrees 
with  Carr’s  conclusions  but 
can  understand  his  cautionary 
message  about  not  jumping 
into  new  technologies  too 
quickly. 


“My  concern  was  his  logic,” 
Zakharia  said.  “If  as  an  [IT]  in¬ 
dustry,  we  do  not  take  calcu¬ 
lated  risks  and  invest  money 
into  these  [new]  products, 
eventually,  directly  or  indi¬ 
rectly,  that’s  going  to  halt  the 
innovation  cycle,  and  that’s 
going  to  have  an  even  more 
detrimental  negative  impact 
on  our  business.” 

James  Barry,  vice  president 
of  development  for  payroll  and 
human  resources  applications 
at  Automatic  Data  Processing 
Inc.  (ADP)  in  Roseland,  N.J., 
said  Carr  made  some  valid 
points  in  his  presentation  but 
Metcalfe  “made  the  same  ar¬ 
gument  I  would  make.” 


SPARRING  WITH  CARR 

To  read  a  full  transcript  of  the 
debate,  visit  our  Web  site: 

O  QuickLink  45332 

(Viewing  this  page  requires  registration.) 


“If  you  only  have  a  short  time 
to  have  your  sustainable  advan¬ 
tage”  over  competitors,  Barry 
said,  “that  means  you  have  to 
be  even  faster  with  IT,”  rather 
than  slowing  your  investments 
as  suggested  by  Carr.  Barry  said 
ADP  and  its  competitors  make 
improvements  in  their  prod¬ 
ucts,  and  then  they  copy  one 
another  in  a  cycle  of  bringing 
improvements  for  customers. 
“It’s  very  important  [to  keep  up 
with  one  another],  but  it  does¬ 
n’t  give  us  a  sustained  advan¬ 
tage,”  he  said. 

Some  Agreement 

Not  everyone  thought  Carr’s 
conclusions  were  completely 
off  base. 

Roger  Reeg,  senior  vice 
president  of  systems  develop¬ 
ment  at  MasterCard  Interna¬ 
tional  Inc.  in  O’Fallon,  Mo., 
said  he  agrees  with  Carr’s  po¬ 
sition  that  IT  has  become 
more  infrastructure-centered, 
rather  than  innovative.  “We 
are  managing  a  lot  more  infra¬ 
structure,  as  opposed  to  the 
revolutionary  types  of  things 
that  happened  in  the  past,” 
Reeg  said.  “I  actually  thought 
that  both  [Carr  and  Metcalfe] 


had  valid  points.  There  are 
two  sides  to  every  story,  and 
somewhere  in  the  middle, 
there’s  the  truth.  That’s  very 
apt  in  this  case.” 

Thomas  Hupf,  director  of 
information  systems  for  busi¬ 
ness  safety  and  regulatory 
compliance  vendor  J.J.  Keller 
&  Associates  Inc.  in  Neenah, 
Wis.,  said  he  thought  that 
“Carr  won  the  debate  but  lost 
the  argument.”  The  bottom 
line,  he  said,  is  that  IT  innova¬ 
tion  is  good,  as  long  as  a  busi¬ 
ness  can  capitalize  on  it  for  a 
worthwhile  period  of  time.  “If 
you  can  either  extend  the  win¬ 
dow  of  opportunity  or  figure 
out  how  you’re  going  to  capi¬ 
talize  on  it  in  the  window  you 
have,  then  it  makes  sense  to 
do  it,”  Hupf  said. 

Carr,  though,  incorrectly 
dismissed  such  a  strategy, 
Hupf  said.  “There  will  be  a  lot 
of  one-hit  wonders.  But  if  you 
can  figure  out  how  to  take  ad¬ 
vantage  of  that  window,  do  it 
—  even  if  your  window’s  a 
short  one.” 

By  always  moving  forward 
with  IT  innovations,  even  if 
competitors  quickly  adopt 
them,  a  company  can  show 
customers  that  it’s  on  the  lead¬ 
ing  edge  of  development, 
which  can  attract  new  cus¬ 
tomers,  Hupf  said.  “A  pattern 
of  innovation”  tells  customers 
you’re  ahead  of  the  curve  and 
worth  doing  business  with,  he 
said.  O  45408 


CONFERENCE  BLOG 

Speaking  of  Web  services, 
well,  it’s  probably  best  not  to 
actually  use  that  term  with 
business-side  executives,  said 
Patricia  Coffey,  assistant  vice 
president  at  Allstate  Insurance 
Co.  The  phrase  Web  services 
just  seems  to  make  their  eyes 
glaze  over  (and  we  all  know  it’s 
pretty  hard  to  explain).  Better 
to  just  say  what  business  prob¬ 
lems  you  can  solve  with  you- 
know-what  and  leave  it  at  that. 


This  is  an  excerpt  from  Computerworid  features  editor  Mitch  Betts’  confer¬ 
ence  blog.  To  read  the  full  blog,  go  to  our  Web  site:  O  QuickLink 45236 
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During  the  various 
Premier  100  conference 
sessions,  attendees 
were  asked  their  opin¬ 
ions  on  a  wide  range  of 
IT  issues.  The  results  of 
one  poll  appear  below. 
To  access  all  the  results, 
visit  our  Web  site  (view¬ 
ing  this  page  requires 
registration). 

O  QuickLink  a4140 


Are  vendor  lobbying 
groups  such  as  ITAA 
having  a  positive  or 
negative  impact  on 
cybersecurity  progress? 


65% 


21% 


14% 


POSITIVE 

Helping  to  lead  the  fight 
in  support  of  all  users 

NEGATIVE 

Self-serving,  politically 
motivated 

Pay  no  attention  to 
these  groups 


is  able  to  farm  out  a  fair  amount  of  its 
application  maintenance,  it  has  been 
able  to  lower  its  software  support 
costs  “to  about  25  cents  on  the  dol¬ 
lar,”  he  said. 

Bruce  Philipoom,  assistant  vice 
president  of  database  administration 
at  Raymond  James  Financial  Inc.,  a 
financial  services  firm  in  St.  Peters¬ 
burg.  Fla.,  said  he  believes  the  ability 
for  IT  organizations  to  be  more  re¬ 
sponsive  to  business-unit  demands 
“is  centered  more  around  having  ma¬ 
ture  processes.” 

Philipoom  maintained  that  if  an  IT 
organization  has  mature  business 
processes  and  an  effective  IT  gover¬ 
nance  plan,  “you  can  more  easily  re¬ 
act  to  changing  business  condi¬ 
tions,”  in  part  by  tapping  contract 
help  as  needed. 

Another  financial  services  firm,  Al¬ 


liance  Capital  Management  LP  in 
New  York,  has  bolstered  its  applica¬ 
tion  development  staff  from  about 
92  people  to  100  over  the  past  six 
months,  said  Richard  K.  Ronan,  se¬ 
nior  vice  president  of  global  invest¬ 
ment  management  technology. 

Convincing  Business  People 

But  while  Alliance  Capital  Manage¬ 
ment  has  sent  some  of  its  applica¬ 
tion  maintenance  offshore  to  reduce 
costs,  Ronan  said  he’s  still  undecid¬ 
ed  about  how  to  sell  business  man¬ 
agers  on  the  concept  of  sending 
some  development  work  overseas. 

“If  we  add  five  offshore  developers  at 
the  cost  of  one  U.S.  developer,  busi¬ 
ness  executives  will  want  to  know 
whether  they’re  delivering  one-to- 
one  productivity  with  our  developers 
here  and  how  the  economics  of  this 


would  play  out,”  said  Ronan. 

Programmers  at  his  company  are 
nearly  all  cross-trained  on  develop¬ 
ment  skills  such  as  Java,  C++  and  C#, 
Ronan  said,  “so  that  we  can  more  eas¬ 
ily  move  them  from  project  to  project, 
depending  on  where  they  fit  best.” 

Companies  that  have  been  grow¬ 
ing  their  IT  staffs,  as  Raymond 
James  and  Alliance  Capital  Manage¬ 
ment  have  done,  remain  exceptions. 
Most  companies  with  pared-down  IT 
departments  continue  to  struggle  to 
deliver  daily  tech  support  and  appor¬ 
tion  technicians  to  a  backlog  of  IT 
projects  that  piled  up  when  the 
economy  went  soft. 

J.R.  Simplot  Co.  had  to  reduce  the 
size  of  its  global  IT  staff  by  about  10% 
to  around  340  people  18  months  ago, 
said  Roger  Parks,  vice  president  and 
CIO  at  the  food  and  agribusiness  con- 


Hlfwe  add 
five  offshore 
developers  at  the 
cost  of  one  U.S. 
developer,  busi¬ 
ness  executives 
will  want  to  know 
whether  they’re 
delivering  one-to- 
one  productivity 
with  our  develop¬ 
ers  here. 

RICHARD  K.  RONAN,  SENIOR  VICE 
PRESIDENT  OF  GLOBAL  INVESTMENT 
MANAGEMENT  TECHNOLOGY, 
ALLIANCE  CAPITAL  MANAGEMENT  LP 


glomerate  in  Boise,  Idaho. 

But  Parks  began  changing  the 
company’s  IT  governance  model  to  a 
more  decentralized  approach  when 
he  came  aboard  four  years  ago,  and 
as  a  result  “we’ve  been  able  to  put 
more  IT  people  to  work  directly  in  the 
business  units  to  better  support  their 
needs,"  he  said. 

Under  the  decentralized  model,  IT 
workers  are  distributed  throughout 
J.R.  Simplot’s  business  divisions,  but 
the  IT  department  itself  still  controls 
technology  spending. 

Parks  said  that  he  believes  the 
approach  has  enabled  his  staff  to 
deliver  IT  projects  that  are  better 
aligned  with  business  specifications. 
That  has  helped  the  company  reduce 
its  IT  spending  by  about  23%  over 
the  past  four  years,  Parks  said. 

O  45418 
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Panelists  Offer  Tips  on 
Improving  IT  Security 


The  panel  discussed  ways  to  respond  to  IT  security  demands. 


BY  GARY  H.  ANTHES 

PALM  DESERT.  CALIF. 

A  panel  of  IT  managers  told 
attendees  at  Computerworld’ s 
Premier  100  IT  Leaders  Con¬ 
ference  here  last  week  that  the 
federal  government  has  had 


In  the  opening  keynote 


speech,  American  Express 
Co.  CIO  Glen  Salow  offered 
a  framework  to  answer  the 
question,  “Do  our  technol¬ 
ogy  investments  generate 
adequate  value?" 


To  read  more,  visit  our  Web  site: 
O  QuickLink  45306 


some  positive  impact  on  cor¬ 
porate  security,  mostly  via 
regulation  and  legislation  such 
as  the  Health  Insurance  Porta¬ 
bility  and  Accountability  Act 
of  1996. 

“I  will  tell  you  that  your 
health  data  is  significantly 
more  secure  today  than  it  was 
yesterday,”  said  Linda  Reino, 
who  is  the  CIO  at  Universal 
Health  Services  Inc.  in  King  of 
Prussia,  Pa. 

Reino  added  that  govern¬ 
ment  agencies  such  as  the  U.S. 
Food  and  Drug  Administration 
have  helped  her  strong-arm 
reluctant  vendors  into  making 
their  products  more  secure. 

New,  wide-ranging  govern¬ 
ment  regulations  helped  push 
The  Guardian  Life  Insurance 
Company  of  America  to  estab¬ 
lish  a  “holistic  approach”  to 
risk  management,  said  Marc  S. 
Sokol,  Guardian  Life’s  chief  se¬ 
curity  officer.  The  New  York- 
based  company  created  the  po¬ 
sition  of  computer  security  of¬ 
ficer,  which  has  responsibility 
for  IT  security  but  also  over¬ 
sees  physical  security,  disaster 


recovery  and  other  risk  man¬ 
agement  functions,  he  said. 

Panelists  said  it’s  sometimes 
hard  for  IT  managers  to  strike 
a  balance  between  customer 
service  and  security.  “You  want 
to  be  an  enabler;  you  don’t 
want  to  always  say  no,”  said  A1 
Brusewitz,  chief  information 
security  officer  and  CIO  for 
the  County  of  Los  Angeles. 

They  agreed  that  employee 
education  —  while  “not  sexy,” 
as  one  panelist  put  it  —  is  re¬ 
ally  the  linchpin  for  security. 
William  Farrow,  CIO  at  the 
Chicago  Board  of  Trade,  said  a 
woman  cleaning  a  conference 
room  there  became  suspicious 
of  a  laptop  left  running 
overnight.  She  reported  it  to 
security,  and  it  was  later  dis¬ 
covered  that  someone  had  left 
the  laptop  running  port-scan¬ 
ning  software  aimed  at  the 
corporate  network. 

Asked  how  the  Board  of 
Trade  had  gotten  even  low- 
level  employees  to  be  so  savvy 
about  security,  Farrow  an¬ 
swered,  “We  scare  people.” 
Adherence  to  security  princi¬ 
ples  is  part  of  the  employee 
contract,  he  said. 

Senior  managers  have  to  be 
educated,  too,  but  you  have  to 
communicate  with  them  in 
ways  they  can  relate  to,  Sokol 


said.  “We  don’t  talk  about  port 
scans  or  buffer  overflows,”  he 
said.  “We  talk  about  informa¬ 
tion  disclosure.” 

Reino  offered  this  advice  on 
employee  education:  “Make  it 
a  part  of  daily  conversation  in 
every  project  meeting.  We 
make  it  clear  that  every  proj¬ 
ect  has  responsibility  for  secu¬ 
rity.  You  have  to  make  it  part 
of  day-to-day  operations.” 

She  also  said  it’s  important 
to  publicize  employee-caused 
security  incidents  internally, 
not  necessarily  naming  the 
employee  who  made  a  mis¬ 
take,  but  doing  it  in  a  way  that 
others  learn  from  the  error. 

Panelists  singled  out  wire¬ 
less  and  mobile  computing  as 
sources  of  special  concern  but 
said  limiting  their  use  isn’t  a 


solution.  Modern  medicine 
demands  that  hospital  workers 
carry  wireless  devices,  Reino 
said,  but  wireless  networks 
must  be  protected  by  encryp¬ 
tion  and  intrusion-detection 
software. 

Rob  Clyde,  chief  technology 
officer  at  Symantec  Corp.,  said 
strong  encryption  for  wireless 
is  necessary  but  not  sufficient. 
“It’s  not  enough  for  worms 
and  viruses;  worms  can  crawl 
right  through,”  he  said. 

Several  panelists  said  they 
equip  employees’  home  and 
mobile  PCs  with  the  same  se¬ 
curity  software,  such  as  anti¬ 
virus  software,  that’s  used  in 
the  office.  “We  mandate  the 
antivirus  product  you  use,” 
Reino  said.  “We  can’t  live  with 
your  decision.”  ©  45422 


Consolidation  Remains 
High  on  IT  Pros’  Agendas 


BY  PATRICK  THIBODEAU 

PALM  DESERT.  CALIF. 

The  drive  to  consolidate  servers  and 
data  centers  began  in  earnest  after 
the  dot-com  bust  as  a  remedy  for  the 
excesses  of  rapid  IT  growth  in  many 
enterprises.  And  consolidation  re¬ 
mains  a  top  IT  issue  for  a  lot  of  rea¬ 
sons.  even  if  some  of  the  cost  sav¬ 
ings  aren't  exactly  what  vendors 
promise. 

Vendors  “get  all  excited  about 
how  you  can  get  all  this  benefit  from 
server  reduction,"  said  Gary 
Shanker,  director  of  information  sys¬ 
tems  enterprise  infrastructure  ser¬ 
vices  at  Arizona  Public  Services 
Corp.  Shanker  cited  claims  that  as 
many  as  eight  servers  could  be  easi¬ 
ly  reduced  to  one,  but  he  said  the 
best  he  has  been  able  to  do  is  con¬ 


solidate  four  servers  to  one  at  the 
Phoenix-based  utility.  Limits  on  the 
ability  of  a  server  to  support  multiple 
applications  without  conflicts  have 
restricted  further  consolidation, 
Shanker  said. 

Many  of  the  IT  managers  inter¬ 
viewed  at  Computerworlcf  s  Premier 
100  IT  Leaders  Conference  here  last 
week  said  they're  involved  in  exten¬ 
sive  server  or  data  center  consolida¬ 
tion  projects.  And  while  their  views 
vary  about  a  consolidation's  poten¬ 
tial  for  savings,  they  said  there  are 
many  reasons  for  undertaking  one. 

Compliance  with  the  Sarbanes-Ox- 
ley  Act  wasn't  a  consideration  when 
Michael  Gaynor,  senior  vice  president 
and  CIO  at  Federal-Mogul  Corp.,  be¬ 
gan  his  consolidation  effort  18  months 
ago.  But  improving  the  ability  to  audit 


IT  in  order  to  meet  compliance  re¬ 
quests  has  since  emerged  as  a  key 
reason  behind  his  effort. 

The  Southfield,  Mich.-based  sup¬ 
plier  of  automotive  components  con¬ 
solidated  nine  data  centers  into  one 
last  year  and  plans  to  take  out  nine 
more  this  year.  The  goal  is  to  reduce 
the  number  of  data  centers  to  two: 
one  in  the  U.S.  and  one  in  Europe. 

Gaynor  said  consolidation  is  also 
an  essential  step  when  considering 
outsourcing.  Federal-Mogul  runs  its 
IT  systems  in-house,  but  Gaynor  said 
he’s  looking  at  strategic  sourcing  of 
his  IT  infrastructure  -  something  he 
can’t  do  until  he  cuts  his  own  costs. 

“What  you  need  to  do  as  a  busi¬ 
ness  manager  is  first  clean  up  your 
own  house,"  said  Gaynor,  adding 
that  if  he  doesn't  reduce  his  costs, 
an  outsourcer  will  take  those  sav¬ 
ings.  Once  a  company  saves  money 
through  consolidation,  “if  you  can 
get  another  25%  or  30%  out  of  an 
outsourcer,  it  might  make  it  worth 
something."  he  said. 


Ken  Hair,  IT  director  at  the  Detroit 
Medical  Center  (DMC),  has  been 
consolidating  servers  for  five  years 
to  ease  support  and  maintenance 
and  to  cut  costs.  The  consolidations 
often  come  in  response  to  new  ac¬ 
quisitions  by  the  12.000-employee 
health  care  organization,  which  oper¬ 
ates  10  hospitals,  two  nursing  cen- 


LAST  WORD 


The  closing  speech  was 
delivered  to  a  very  engaged 
audience  by  author,  actor 
and  humorist  Ben  Stein. 


ters  and  other  facilities  in  Michigan. 

Application  conflicts  sometimes 
arise,  and  if  Hair  is  dealing  with  a 
unique  application,  he  may  leave  it 
on  its  own  server.  But  many  DMC 
hospitals  share  applications,  so 
much  of  Hair's  work  is  focused  on 
physical  consolidation,  such  as  using 
blades  and  racks  and  sharing  a  com¬ 
mon  network  infrastructure  and 
management  capability. 

Server  consolidation  isn’t  the  an¬ 
swer  for  everyone.  Mark  Naylor,  CIO 
at  Humber  College,  a  Toronto-based 
institution  with  more  than  45,000 
full-  and  part-time  students,  said 
server  consolidations  require  costly 
testing  to  ensure  that  applications 
don’t  conflict.  Centralizing  also  in¬ 
creases  the  possibility  that  a  security 
breach  on  one  server  could  lead  to  a 
larger  problem. 

“People  costs  are  more  important 
to  me  than  the  cost  of  a  server,”  said 
Naylor.  “My  people  resources  are 
very  limited,  so  it's  easier  for  me  to 
go  buy  another  server.”  ©  45421 


For  your  next  generation  of  applications,  move 
to  the  next  generation  of  database  technology. 

Cache  is  the  post-relational  database  that  com¬ 
bines  high-performance  SQL  for  faster  queries  and 
an  advanced  object  database  for  rapidly  storing 
and  accessing  objects.  With  Cache,  no  mapping 
is  required  between  object  and  relational  views  of 
data.  That  means  huge  savings  in  both  development 
and  processing  time. 

Applications  built  on  Cache  are  massively  scala¬ 
ble  and  lightning-fast.  Plus,  they  require  minimal  or 
no  database  administration. 

More  than  just  a  database  system,  Cache  incor¬ 
porates  a  powerful  Web  application  development 


environment  that  dramatically  reduces  the  time  to 
build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“life-or-death”  applications  at  thousands  of  the  world’s 
largest  hospitals.  Cache  is  so  reliable,  it’s  the  leading 
database  in  healthcare  -  and  it  powers  enterprise  appli¬ 
cations  in  financial  services,  government  and  many 
other  sectors. 

We  are  InterSystems,  a  specialist  in  data  manage¬ 
ment  technology  for  twenty-five  years.  We  provide 
24x7  support  to  four  million  users  in  88  countries. 
Cache  is  available  for  Windows,  OpenVMS,  Linux  and 
major  UNIX  platforms  -  and  it  is  deployed  on  systems 
ranging  from  two  to  over  10,000  simultaneous  users. 


InterSystems  A 

£  CACHE 

Make  Applications  Faster 

Try  a  better  database.  For  Free. 

Download  a  free,  fully-frmctional,  non-expiring  version  of  Cache  or  request  it  on  CD  at  www.InterSvstems.com/robust 


©  2003  InterSystems  Corporation.  .Ml  n gilts  reserved.  InterSystems  Cache  is  a  registered  trademark  of  InterSystems  Corporation.  7-03 
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Sears,  CSC  Start 
Outsourcing  Talks 

Sears,  Roebuck  and  Co.  said  it 
will  negotiate  an  IT  outsourcing 
deal  that’s  expected  to  be  worth 
about  $2  billion  over  the  next  10 
years  with  Computer  Sciences 
Corp.  If  the  companies  agree  on 
a  contract,  CSC  would  take  over 
management  of  the  retailer’s 
systems,  networks  and  decision- 
support  technology.  Sears  CIO 
Gary  Kelly  told  Computerworld  in 
January  that  he  planned  to  out¬ 
source  much  of  the  company’s  IT 
infrastructure  [QuickLink  44112]. 

Oracle  Must  Share 
Discount  Data 

A  federal  judge  ordered  Oracle 
Corp.  to  give  the  U.S.  Depart¬ 
ment  of  Justice  information 
about  the  discounts  it  has  offered 
to  software  buyers.  The  judge 
agreed  with  the  DOJ  that  the  in¬ 
formation  could  be  material  to 
the  lawsuit  the  agency  filed  in  an 
attempt  to  block  Oracle’s  hostile 
takeover  bid  for  PeopleSoft  Inc. 

IT  Savings  at  DHS 
Unclear,  GAO  Says 

The  U.S.  General  Accounting 
Office  released  a  report  saying 
that  it’s  unclear  how  much,  if 
any,  money  has  been  saved  by 
the  U.S.  Department  of  Home¬ 
land  Security’s  consolidation  and 
integration  of  systems  from  22 
federal  agencies.  DHS  officials 
relied  upon  "an  informal  and  un¬ 
documented  process”  to  review 
and  approve  more  than  S4  billion 
in  IT  investments,  the  report  said. 


Short  Takes 

HEWLETT-PACKARD  CO.  said  it 
plans  to  buy  TRULOGICA  INC.,  a 
Dallas-based  developer  of  soft¬ 
ware  that  manages  end-user  ac¬ 
cess  privileges  across  multiple 
systems. . . .  COMPUTER  ASSOCI- 
^NiTIONAL  INC.  has 
bought  v.'OMR  SOFTWARE  INC., 
a  Santa  Barbara,  Calif.,  vendor  of 
desktop  migration  tools. 


MARK  HALL  ■  ON  THE  MARK 

ATG  Gives  End 
Users  Less  Info . . . 

...  in  order  to  get  them  the  right  answers  to  their  queries  on  e-com- 
merce  Web  sites.  Or  that’s  the  theory.  Cliff  Conneighton,  senior  vice 
president  of  marketing  at  Art  Technology  Group  Inc.  in  Cambridge, 
Mass.,  argues  that  sites  using  traditional  search  tools  overburden  peo¬ 
ple  with  too  many  possibilities.  “They  often  get  too  much  information 
to  make  a  decision,”  he  says.  ATG’s  answer?  “Well  give  them  as  few 
answers  as  possible,  maybe  just  one,”  he  proclaims.  “Hopefully,  the 
only  one.”  The  one,  true  answer  machine  will  arrive  at  the  end  of  March 


in  the  form  of  ATG’s  Adaptive  Customer 
Assistance  (ACA)  module  to  the  ATG 
Commerce  Package.  What  makes  Con¬ 
neighton  so  cocksure  that  the  $20,000 
ACA  module  will  work  is  that  it  ties 
a  site’s  content  to  user  profiles  in  its 
knowledge  base.  “We’re  not  just  indexing 
random  data  on  the  site,”  he  says.  ■  Also 
at  month’s  end,  ATG  will  ship  its  Cam¬ 
paign  Optimizer  module,  which  uses  a 
GUI  tool  so  simple  even  marketing  man¬ 
agers  can  use  it.  It  lets 
users  define,  create  and 
conduct  their  own  prod¬ 
uct-comparison  tests.  Do 
blue  sweaters  on  models 
sell  better  than  yellow 
ones  on  hangers?  Who 
cares?  Certainly  not  you  any 
longer,  because  with  the 
new  tool,  marketers 
won’t  be  asking  you  to 
create  those  time-con¬ 
suming  comparison  pro¬ 
grams.  At  $50,000,  it’s 
probably  a  cheap  price  to 
keep  those  marketing 
types  out  of  your  part  of 


Smarter  Printers 


This  fall,  Kyocera  Mita  Ameri¬ 
ca  in  Fairfield,  N.J.,  will  ship 
the  first  of  its  multifunction 
printers  equipped  with  soft¬ 
ware  from  Notable  Solutions 
Inc.  (NSi)  in  Gaithersburg, 
Md.  The  software  integrates 
documents  processed  by  the 
printer  into  a  variety  of  docu¬ 
ment  management  systems. 
NSi’s  five-year  exclusive  con¬ 
tract  with  Hewlett-Packard 
Co.  expired  this  year. 


the  building.  ■  Silicon  Valley  has  its  garages, 
Oregon  has  its  barns.  That’s  where  Musi¬ 
cian’s  Friend  Inc.  started  its  mail-order 
music-equipment  business  in  Medford, 
tucked  in  the  southwest  part  of  the  state. 
The  20-year  old  company  is  now  part  of 
Westlake,  Calif. -based  Guitar  Center  Inc., 
a  $1.2  billion  distributor  of  musical  gear. 
And  it’s  moved  from  stacking  guitar  cas¬ 
es  on  hay  bales  to  putting  them  in  a  cav¬ 
ernous  250,000-square-foot  distribution 
center  in  Kansas  City,  Mo. 
And  it  runs  a  major  e-com¬ 
merce  site  along  with  a 
300-person  call  center  in 
Salt  Lake  City.  The  catalog 
and  Web  business  are  split 
equally.  The  IT  opera¬ 
tions,  still  based  in  Med¬ 
ford,  have  been  touted  as 
the  reason  the  company 
did  so  well  financially  in 
2003,  growing  its  profits  by 
46%.  In  its  most  recent 
earnings  release,  the  com¬ 
pany  said,  “Solid  supply 
chain  execution  enabled 
us  to  capitalize  on  high 


traffic  at  our  Guitar  Center  stores  and, 
as  a  result  of  our  improved  infrastructure 
and  systems  at  Musician’s  Friend,  we  were 
poised  to  take  advantage  of  increased  In¬ 
ternet  demand.”  While  giving  the  lion’s 
share  of  the  credit  to  his  team  and  man¬ 
agement  for  their  work  and  support,  D.J. 
Buell,  director  of  IT  at  Musician’s  Friend, 
also  has  kudos  for  Verastream,  a  well- 
established  integration  tool  from  WRQ. 
Inc.  in  Seattle.  Buell  puts  it  at  the  center 
of  both  the  company’s  “marry-up”  inven¬ 
tory  application  and  its  ability  to  link 
Web  operations  so  easily  to  its  HP  3000 
legacy  system,  referred  to  in  the  press 
release.  He’s  particularly  jazzed  about 
Verastream’s  object-oriented  design. 
Code  written  for  its  pilot  project  years 
ago  is  still  useful  today,  he  says.  Vera¬ 
stream  will  also  be  crucial  during  the  in¬ 
evitable  massive  applications  migration 
effort  when  the  HP  3000  gets  reluctantly 
put  out  to  pasture,  sometime  in  late  2005. 

■  So  Buell  will  be  pleased  when  later  this 
month  WRQ_ships  Verastream  5.5.  Ac¬ 
cording  to  Shaun  Wolfe,  WRQ]s  president 
and  chief  operating  officer,  in  addition  to 
freshening  up  the  GUI,  the  upgrade  will 
“smooth  out  the  differences  between  Java  and 
.Net.”  Wolfe  says,  “While  it  may  be  in  a 
company’s  best  interest  to  stick  to  either 
Java  or  .Net,  they  always  end  up  with  a 
hybrid  environment.”  ■  Some  applications 
can  never  run  too  fast.  That’s  the  logic  be¬ 
hind  the  product  strategy  at  NetScaler 
Inc.  in  Santa  Clara,  Calif.  It  ships  appli¬ 
ances  that  boost  the  performance  of  soft¬ 
ware  by  managing  TCP/IP  connections 
more  efficiently  and  applying  compres¬ 
sion  of  higher-level  protocols  such  as 
HTTP  traffic.  By  fall,  the  company  says  it 
will  ship  an  appliance  that  will  be  able  to 
apply  advanced  compression/decompression 
techniques  on  TCP  traffic,  which  can  be  par¬ 
ticularly  useful  for  SLA-dependent  appli¬ 
cations  used  inside  a  VPN.  ©  45413 


IBM  Bundles  Storage  Management  Tools 


BY  LUCAS  MEARIAN 

IBM  last  week  announced  a 
storage  software  suite  that  it 
said  at  least  partially  fulfills  a 
utility  computing  plan  to  let 
storage  devices  be  centrally 
managed  and  automatically  al¬ 
located  to  application  servers. 

The  new  suite,  called  Total- 
Storage  Productivity  Center, 
supports  the  discovery,  moni¬ 
toring  and  provisioning  of 
disk  and  tape  arrays  as  well  as 
storage  networking  equip¬ 
ment.  IBM’s  rollout  matches 
recent  moves  by  EMC  Corp. 


and  Veritas  Software  Corp. 

Mike  Fisch,  an  analyst  at  The 
Clipper  Group  Inc.  in  Welles¬ 
ley,  Mass.,  said  IBM  is  moving 
closer  to  allowing  storage  ca¬ 
pacity  to  be  provisioned  on  de¬ 
mand.  But  like  its  competitors, 
IBM  still  lacks  in-depth  inte¬ 
gration  with  hardware  made  by 
other  vendors,  he  added. 

“It’s  like  a  jigsaw  puzzle, 
and  they’re  throwing  all  these 
pieces  out  onto  the  table,” 
Fisch  said.  “It’s  hard  for  us  . . . 
to  put  it  all  together  and  un¬ 
derstand  how  it  fits.  But  it 


does  fit  somewhat,  and  they’re 
taking  some  good  steps  to¬ 
ward  realizing  this  vision.” 

TotalStorage  Productivity 
Center  combines  Tivoli  SAN 
Manager  and  Tivoli  Storage 
Resource  Manager  with  a 
new  device  discovery  tool 
called  Tivoli  Multiple  Device 
Manager. 

Jeff  Barnett,  manager  of 
market  strategy  at  IBM’s  soft¬ 
ware  division,  said  the  device 
management  tool  is  designed 
around  the  Storage  Network¬ 
ing  Industry  Association’s 


Storage  Management  Initia¬ 
tive  Specification,  a  set  of 
common  models  and  applica¬ 
tion  programming  interfaces 
that  will  let  storage  manage¬ 
ment  applications  control  disk 
and  tape  devices  from  differ¬ 
ent  vendors. 

The  new  suite  works  with 
Enterprise  Storage  Server  disk 
arrays,  known  informally  as 
Shark,  plus  IBM’s  midrange 
FAStT  arrays  and  SAN  Volume 
Controller  virtualization  soft¬ 
ware.  IBM  said  the  new  prod¬ 
uct  also  supports  some  func¬ 
tionality  on  arrays  made  by  Hi¬ 
tachi  Data  Systems  Corp.  and 
Hewlett-Packard  Co.  ©  45419 


Middleware  is  Everywhere 


MIDDLEWARE  IS  IBM  SOFTWARE.  Software  like  IBM 
Tivoli  Orchestration  and  WebSphere"  solutions.  Based  on 
your  business  priorities,  Tivoli  software  automatically  and 
intelligently  senses  and  responds  to  change.  Assets  are 
dynamically  reallocated.  And  resources  are  optimized.  All 
with  your  current  infrastructure.  All  without  breaking  the  bank 
(©business  on  demand  ” at  ibm.com/tivoli/middleware 


1.  Senses  increased  demand  for  raincoats 

2.  Responds  to  demand  automatically. 

3.  Senses  increased  Web  traffic. 

4.  Responds  to  traffic  automatically. 

5.  Senses  registers  ringing  constantly. 


IBM.  Tivoli  WebSphere,  the  e-busirvess  logo  and  e-business  on  demand  are  registered  trademarks  or  trademarks  of  International  Business  Machines  Corporation  in  the-Uhited  S te 
other  countries.  2004  IBM  Corporation.  All  rights  reserved  •  .  .v  V  ;  *  , 
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U.K.  Agency  Pulls 
Plug  on  EDS  Deal 

The  U.K.  National  Health  Service 
said  it  has  pulled  out  of  a  10-year, 
$166  million  contract  that  called 
for  Electronic  Data  Systems  Corp. 
to  install  a  centrally  managed 
e-mail  system.  The  agency  signed 
a  similar  deal  with  British  Tele¬ 
communications  PLC  last  year, 
one  year  after  EDS  was  awarded 
its  contract.  EDS  said  it  had  been 
meeting  its  contractual  obliga¬ 
tions  and  will  seek  compensation 
for  the  termination  of  the  deal. 


Dell  Adds  VMware 
Tools  to  Servers 

Dell  Inc.  said  it  will  bundle  server- 
virtualization  software  developed 
by  VMware  Inc.  with  some  config¬ 
urations  of  its  PowerEdge  servers. 
The  deal  expands  Dell’s  technol¬ 
ogy  partnership  with  EMC  Corp., 
which  acquired  VMware  in  Janu¬ 
ary.  Dell  will  also  handle  first- 
level  technical  support  calls  on 
the  VMware  tools,  which  are  be¬ 
ing  offered  on  the  servers  along 
with  EMC’s  Clariion  disk  arrays. 


Microsoft  Patches 
Three  Security  Raws 

As  part  of  its  monthly  security  up¬ 
dates,  Microsoft  Corp.  issued 
patches  for  Outlook,  MSN  Mes¬ 
senger  and  the  Windows  Media 
Services  software  included  with 
Windows  2000.  The  company  ini¬ 
tially  didn’t  rate  any  of  the  securi¬ 
ty  flaws  as  “critical,”  but  it  later 
upgraded  the  severity  of  the  Out¬ 
look  flaw  to  that  level.  Separately, 
Microsoft  released  a  third  service 
pack  of  security  updates  and  bug 
fixes  for  Office  XP. 


Short  Takes 

Antivirus  software  vendors  warned 
about  a  new  variant  of  the  SOBER 
e-mail  worm  that  masquerades  as 
a  security  patch  from  Microsoft. 
...  is  buying  Trigo  Technolo¬ 
gies  Inc.,  a  Brisbane,  Calif.-based 
vendor  of  software  for  storing 
product-related  information,  for 
an  undisclosed  price. 
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Vendors  Eye  Cheaper 
Switching  at  Net  Edges 


Foundry,  Extreme  expand  product  lines 
for  connecting  PCs  to  core  networks 


BY  MATT  HAMBLEN 

Foundry  Networks  Inc. 
and  Extreme  Networks 
Inc.  today  plan  to  sepa¬ 
rately  announce  edge¬ 
switching  technology  that 
promises  users  lower  costs 
and  improved  functionality. 

San  Jose-based  Foundry  is 
introducing  two  Fastlron  Edge 
X-Series  rack-mounted  switch¬ 
es  that  offer  10  Gigabit  Ether¬ 
net  uplink  capabilities  to  core 
networks  at  a  price  of  $3,250 
per  port.  That’s  about  half  the 
cost  of  chassis-based  switches, 
Foundry  officials  said. 

Extreme  in  Santa  Clara, 
Calif.,  is  announcing  that  its 
Unified  Access  architecture 
and  Power  over  Ethernet  ca- 


running  10  Gigabit  Ethernet 
between  the  wiring  closets 
and  the  data  center,  said 
Richard  Nelson,  the 
institute’s  director  of 
computing. 

“We’re  always 
looking  for  innova¬ 
tion,”  Nelson  said, 
pointing  to  the  need 
to  provide  high 
bandwidth  to  com¬ 
puters  that  are  linked 
for  research  into  grid 
computing  and  the 
idea  of  interfacing 


NELSON  says  ISI 
needs  switches 
that  deliver  high 
bandwidth. 


computer  chips  with  biologi¬ 
cal  tissues. 

The  San  Francisco  Museum 
of  Modern  Art  has  connected 
20  wireless  access  points  to 
Extreme’s  Summit  300  switch¬ 
es,  partly  to  take  ad¬ 
vantage  of  their 
Power  over  Ethernet 
capability,  said  IT 
director  Leo  Ballate. 
He  added  that  the 
Unified  Access  ar¬ 
chitecture  also  pro¬ 
vides  security  and 
administration  fea¬ 
tures  on  the  switch¬ 
es  and  not  in  the  ac¬ 
cess  points,  which 


Cisco  Continues  Security  Push 


pability  will  be  extended  to 
its  Alpine  3800  series  switch¬ 
es,  which  can  be  used  in  small 
core  networks  or  on  network 
edges.  Extreme  has  offered 
Unified  Access  since  last 
April  on  its  Summit  300  edge 
switches  to  provide  wired  and 
wireless  access  on  a  single  de¬ 
vice  that  also  supports  Power 
over  Ethernet.  That  frees  IT 
managers  from  needing  to 
have  separate  infrastructures 
for  wired  and  wireless  LANs. 

Keeping  Up  With  PCs 

Edge  switching  accounts  for 
about  40%  of  all  switch  rev¬ 
enues,  said  Joel  Conover,  an 
analyst  at  Current  Analysis 
Inc.  in  Sterling,  Va.  He  added 
that  there’s  a  constant  need 
for  innovation  at  the  edges  of 
networks  to  keep  up  with  new 
technologies  in  desktop  PCs 
and  other  end-user  devices. 

The  Information  Sciences 
Institute  (ISI)  at  the  Universi¬ 
ty  of  Southern  California  this 
week  plans  to  begin  testing 
Foundry’s  new  X424  and  X448 
switches  inside  12  wiring  clos¬ 
ets,  using  the  devices  to  con¬ 
nect  350  PCs  to  a  data  center 
in  Marina  del  Rey,  Calif.  ISI  is 


BY  JAIKUMAR  VIJAYAN 

Who  better  to  deliver  network 
security  than  the  vendor  of 
most  of  your  networking 
equipment? 

That  appears  to  be  the 
thinking  behind  Cisco  Systems 
Inc.’s  strategy,  as  the  company 
last  week  released  another 
round  of  products  aimed  at 
helping  companies  detect  and 
respond  to  network  intrusions 
more  efficiently. 

The  products  include  a  new 
IP  source  tracking  technology 
for  locating  network  entry 
points  for  denial-of-service 
(DoS)  attacks,  transparent  fire¬ 
wall  support  that  allows  users 
to  segment  networks  into  se¬ 
curity  zones  and  management 
software  for  Cisco  routers. 

Together,  the  new  capabili¬ 
ties  build  on  Cisco’s  Self- 
Defending  Network  strategy, 
said  Steve  Collin,  a  director  at 
the  company.  Under  the  initia¬ 
tive,  Cisco  is  trying  to  build 
technologies  that  can  automati¬ 
cally  detect  and  respond  to  net¬ 
work  threats  better  than  stand¬ 
alone  security  products  can. 

The  IP  source  tracking 
function,  for  instance,  will 
make  it  easier  to  detect  a  DoS 


attack  and  shut  down  mali¬ 
cious  traffic.  Similarly,  the  net¬ 
work  segmentation  that’s  en¬ 
abled  by  the  transparent  fire¬ 
wall  support  gives  companies 
a  way  to  create  “trust  zones” 
within  a  network,  Collin  said. 

Integrating  security  at  the 
network  level  is  crucial,  said 
Jon  Duren,  chief  technology 
officer  at  IdelAire  Technolo¬ 
gies  Inc.,  a  Knoxville,  Tenn.- 
based  provider  of  electrifica¬ 
tion  services  at  truck  stops. 
Stand-alone  security  products 
such  as  firewalls,  intrusion- 


New  Products 

■  Cisco  7301  Router: 

Supports  370Mbit/sec.  VPN 
throughput,  integrated  fire¬ 
walling,  routing  and  quality-of- 
service  management  software. 
Pricing  starts  at  S21.000. 

Cisco  IP  Source  Tracker: 

Security  capability  for  locating 
entry  points  for  DoS  attacks.* 

■  Cisco  I0S  Firewall  for  In¬ 
ternet  Protocol  Version  6: 
Support  for  network  zone 
segmentation.* 

*  Included  in  Cisco's  I0S  software 
Version  12.3T  at  no  extra  charge. 


are  more  vulnerable  to  hack¬ 
ing.  Because  Unified  Access 
will  now  be  available  on  the 
Alpine  product  line,  Ballate 
said  he  would  consider  mov¬ 
ing  to  those  switches  as  the 
museum  grows,  but  not  for  a 
couple  of  years. 

Max  Flisi,  an  analyst  at 
Framingham,  Mass.-based 
IDC,  said  sales  of  10  Gigabit 
Ethernet  ports  saw  a  “huge 
uptick”  in  last  year’s  fourth 
quarter.  Shipments  totaled 
about  5,000  ports,  four  times 
the  third-quarter  level,  accord¬ 
ing  to  Flisi. 

But  he  added  that  the  tech¬ 
nology  remains  a  “drop  in  the 
bucket  in  terms  of  the  larger 
switch  market”  and  ques¬ 
tioned  how  many  companies 
need  lOGbit/sec.  throughput 
now.  “I’m  skeptical  as  to  the 
extent  this  will  be  used,  but 
it’s  future-proofing  your  net¬ 
work,”  he  said.  ©  45423 


detection  systems  and  anti¬ 
virus  software  by  themselves 
aren’t  enough  to  deal  with  the 
increasing  sophistication  of 
network  attacks,  Duren  said.  As 
a  result,  there’s  a  growing  need 
to  find  a  way  to  more  effective¬ 
ly  tie  such  devices  together  and 
share  the  information  that’s  be¬ 
ing  gathered,  he  said. 

Cisco,  as  the  pre-eminent 
supplier  of  enterprise  network 
equipment,  is  in  a  good  posi¬ 
tion  to  do  that,  said  Jeff  Wil¬ 
son,  director  of  Infonetics  Re¬ 
search  Inc.  in  San  Jose. 

“Cisco  really  is  the  only 
vendor  that  can  take  this  posi¬ 
tion,  because  they  not  only  of¬ 
fer  the  security  products  but 
the  network  equipment  as 
well,”  he  said. 

But  there  are  caveats.  Since 
Cisco  is  trying  to  be  a  one- 
stop  shop,  its  technologies 
may  not  always  measure  up  to 
products  from  more  special¬ 
ized  vendors.  “A  lot  of  compa¬ 
nies  that  sell  stand-alone 
products  would  take  issue 
with  the  quality  of  the  individ¬ 
ual  [security]  components  that 
Cisco  has,”  Wilson  said. 

Also,  over  the  long  term, 
Cisco  is  going  to  have  to  ad¬ 
dress  issues  such  as  Web  ser¬ 
vices  and  application-level 
security,  he  added.  ©  45415 
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Some  Wireless  IP  Phone  Users  Shun  Cisco  WLAN  Gear 


WLAN  Strategies 

Cisco:  Uses  distributed  installations  of  access  points  to  control 
WLANs,  although  it  has  added  support  for  setting  up  master  devices. 


Proxim  Corp.,  Symbol  Technologies  Inc.  and  other  vendors:  Offer 
centralized  switches  and  controllers  to  offload  authentication  of 
wireless  devices  as  end  users  move  from  place  to  place. 


Change  vendors 
despite  Cisco’s 
‘fast  roaming’ 

BY  BOB  BREWIN 

Despite  Cisco  Systems  Inc.’s 
rollout  last  June  of  so-called 
fast  roaming  capabilities  for 
wireless  LANs,  some  IT  man¬ 
agers  said  they  have  switched 
to  WLAN  equipment  from 
other  vendors  because  of  con¬ 
cerns  about  quality  of  service 
on  wireless  phone  calls. 

Cisco’s  WLAN  architecture 
is  built  around  smart  access 
points,  which  contain  much  of 
the  intelligence  that  controls 
handoffs  as  users  roam  from 
one  location  to  another.  That 
requires  wireless  devices  to 
reauthenticate  and  obtain  new 
IP  addresses  from  back-end 
servers  as  they’re  moved  —  a 
process  that  can  disrupt  voice 
communications,  according  to 
users  and  analysts. 

For  example,  Pacific  Sun- 
wear  of  California  Inc.  had 
problems  supporting  wireless 
voice-over-IP  calls  on  a  Cisco 
802.11b  WLAN  that  was  in¬ 
stalled  to  support  voice  and 
data  traffic  at  its  new  head¬ 
quarters  in  Anaheim,  Calif., 
said  Ron  Ehlers,  the  clothing 
retailer’s  vice  president  of  in¬ 
formation  services. 

Pacific  Sunwear  equipped 
30  employees  with  wireless 
VoIP  phones  from  SpectraLink 
Corp.  after  it  opened  the 
building  last  year.  But  Ehlers 
said  that  he  soon  began  receiv¬ 
ing  complaints  about  dropped 
calls  when  users  roamed  from 
room  to  room,  especially  in 
areas  where  there  was  heavy 
data  traffic. 

Roaming  Improves 

Late  last  year,  Ehlers  called 
in  Meru  Networks  Inc.,  a  Sun¬ 
nyvale,  Calif. -based  start-up 
that  sells  a  central  WLAN 
controller.  He  said  the  voice 
roaming  problems  went  away 
immediately  after  Meru  in¬ 
stalled  its  equipment.  Ehlers 
replaced  all  16  of  his  Cisco 
access  points  with  Meru’s 
controller  and  access  point 
technology  early  this  year. 


Sirf  Technology  Inc.,  a  San 
Jose-based  maker  of  chip  sets 
for  Global  Positioning  System 
devices,  experienced  similar 
problems  with  SpectraLink 
and  Cisco  7920  VoIP  phones 
operating  over  Cisco’s  WLAN 
access  points,  said  Ian  Chro- 
nister,  Sirf’s  MIS  manager. 

Chronister  also  replaced  the 
Cisco  infrastructure  with  a 
Meru  WLAN,  a  switch  an¬ 
nounced  in  December.  It  was 
an  unusual  move  for  Sirf  “be¬ 
cause  we  could  be  a  poster 


BY  MARC  L.  SONGINI 

SAP  AG  this  week  plans  to  un¬ 
veil  a  more  unified  version  of 
its  NetWeaver  middleware 
that’s  designed  to  end  some  of 
the  headaches  for  users,  who 
now  need  to  coordinate  the 
applications  and  integration 
tools  that  make  up  the  suite. 

SAP  last  week  confirmed 
that  it’s  moving  to  align  the 
components  of  the 
NetWeaver  suite, 
which  includes  the 
company’s  data 
warehouse  soft¬ 
ware,  an  integra¬ 
tion  broker  and 
other  products 
(see  box). 

“Going  forward, 
we’ll  update  NetWeaver  annu¬ 
ally,  with  all  the  pieces  being 
updated  and  synchronized  to¬ 
gether,”  said  SAP  America  Inc. 
spokesman  William  Wohl. 

Eventually,  users  will  be 
able  to  run  the  entire  suite  on 
a  single  server,  something  that 
isn’t  possible  now,  he  said. 

The  new  version  will  also  in¬ 
clude  support  for  radio  fre¬ 
quency  identification  tags, 


child  for  Cisco,”  he  said,  not¬ 
ing  that  his  networks  are  oth¬ 
erwise  all-Cisco. 

Ron  Seide,  WLAN  product¬ 
line  manager  at  Cisco,  said  the 
company  recognizes  that  VoIP 
places  more  demands  on  its 
WLAN  technology  than  data 
sessions,  which  can  tolerate 
gaps  of  one  or  two  seconds  as 
a  user  moves  from  one  access 
point  to  another  in  a  network. 

Last  June,  Cisco  introduced 
what  it  calls  fast,  secure  roam¬ 
ing  features  to  its  IOS  inter- 


so  users  can  develop  RFID- 
enabled  supply  chain  manage¬ 
ment  processes.  Wohl  de¬ 
clined  to  comment  on  when 
the  upgrade  is  due  for  release. 

Some  users  who  are  running 
pieces  of  the  middleware  suite 
were  enthused  by  SAP’s  plan 
to  unify  NetWeaver,  which  has 
assumed  a  central  role  in  the 
software  vendor’s  long-term 
strategy  since  it 
was  announced 
early  last  year. 

“The  products 
were  never  built 
to  be  together  at 
the  same  time,” 
said  Mike  Perroni, 
vice  president  of 
IT  at  Halliburton 
Co.  in  Houston.  That  means 
users  have  to  worry  about 
whether  NetWeaver  compo¬ 
nents  will  work  with  one  an¬ 
other,  he  said.  And  if  there’s  a 
glitch  with  the  software,  get¬ 
ting  it  resolved  can  be  “very 
time-consuming  and  make  the 
process  of  upgrades  very  com¬ 
plex,”  Perroni  added. 

Halliburton,  which  offers 
energy,  engineering  and  con- 


networking  software. 

Fast  roaming  is  supported 
within  a  single  access  point 
that  acts  as  a  master  device  for 
wireless  domain  services,  al¬ 
lowing  quick  authentication  as 
users  roam,  Seide  said. 

Cisco  also  detailed  a  longer- 
term  WLAN  upgrade  strategy 
called  Structured  Wireless- 
Aware  Network,  which  will 
eventually  support  central 
management  of  wireless  de¬ 
vices  from  its  line  of  wired 
switches  and  routers. 

Seide  said  he  wasn’t  familiar 
with  the  installations  at  Pacific 
Sunwear  or  Sirf.  But  he  added 
that  he  thinks  they  could  have 
resolved  their  VoIP  problems 
by  doing  thorough  site  surveys 
to  guide  the  placement  of  ac¬ 
cess  points  and  by  using  Cis¬ 
co’s  fast  roaming  software. 

Brad  Noblet,  director  of 
technical  services  at  Dart- 


struction  services,  runs  SAP’s 
R/3  ERP  applications,  plus  its 
portal  and  data  warehouse 
software.  Perroni,  who  is  also 
a  director  of  the  independent 
Americas’  SAP  Users’  Group 
(ASUG),  said  that  Halliburton 
will  look  at  the  possibility  of 
running  the  portal  and  data 
warehousing  technology  on 
the  same  server  in  the  future. 
“Today,  every  component  re¬ 
quires  one  or  more  boxes  to 
be  installed,”  he  said. 

Responding  to  Feedback 

The  upcoming  improvements 
should  help  make  it  easier  to 
add  third-party  applications  to 
R/3,  said  Lori  Schock,  global 
business  process  manager  at 
silicone  products  maker  Dow 
Corning  Corp.  in  Midland, 
Mich.  Schock,  another  ASUG 
director,  said  SAP  is  making 
the  changes  partly  in  response 
to  feedback  from  the  group’s 
members  that  “we  can’t  afford 
to  manage  multiple  releases 
that  aren’t  synchronized.” 

SAP  is  trying  to  keep  mid¬ 
dleware  vendors  such  as  IBM 
and  BEA  Systems  Inc.  out  of 


mouth  College  in  Hanover, 
N.H.,  said  he  rectified  voice 
call  handoff  problems  on  a 
campus  WLAN  by  using  the 
fast  roaming  functionality.  But 
Noblet  said  he  doesn’t  think 
Cisco’s  WLAN  architecture 
can  scale  enough  to  support  a 
planned  expansion  that  will 
provide  wireless  IP  phone  ser¬ 
vice  to  all  4,000  Dartmouth 
students,  plus  most  faculty 
and  administrative  staffers. 

Dartmouth  has  tapped  Aru¬ 
ba  Wireless  Networks  Inc.  to 
provide  the  college  with  its 
switch-based  WLAN  technol¬ 
ogy  and  about  1,000  access 
points,  Noblet  said.  O  45424 


CAMPUS  NETWORK 

Brad  Noblet  says  centrally  managed  access 
points  are  the  most  affordable  way  to 
expand  Dartmouth's  WLAN: 

QuickLink  45451 
www.computerworld.com 


its  ERP  installed  base  by 
throwing  in  NetWeaver  when 
users  license  its  mySAP  Busi¬ 
ness  Suite,  said  Gartner  Inc. 
analyst  Yvonne  Genovese. 

“The  whole  goal  is  to  bring 
it  on  as  a  single  platform  at 
a  single  price,”  she  said,  not¬ 
ing  one  potential  downside: 
SAP  might  focus  more  on 
making  the  suite  interopera¬ 
ble  than  on  adding  new  fea¬ 
tures.  O  45409 


TECHNOLOGY  DETAILS 
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NetWeaver 

Components  include: 

A  master  data  management 
module  that  harmonizes 
information  from  different 
applications 

A  composite  applications 
framework  with  templates 
and  tool  kits  for  creating 
business  workflows  across 
systems 

SAP’s  Business  Warehouse 
and  Enterprise  Portal 
applications 

Hooks  for  interoperating  with 
Microsoft  .Net  and  J2EE  tech¬ 
nologies  like  IBM  WebSphere 


SAP  Streamlines  Middleware  Suite 


SOFTWARE  UP6RADE 

Cognos  updates  its  reporting 
tools  to  ease  integration  with 
SAP's  data  warehouse  software, 
as  well  as  products  from  IBM 
and  Microsoft: 

©  QuickLink  45445 
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Ms.  3,000  Customer 
Web  Servers  Upgraded 
in  Three  Hours 


r  potential.  Our  passion. 


<c  2004  Microsoft  Corporation.  All  rights  reserved.  Microsoft,  BizTalk,  SharePoint,  SQL  Server,  Windows,  the  Windows  logo,  Windows  Server,  Windows  Server  System,  and  "Your  potential.  Our  passion."  are  either  registered 
trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 


"We  have  3,000  servers  at  customer  sites  worldwide. 
My  team  of  four  manages,  monitors,  makes  changes, 
and  does  upgrades  without  leaving  our  desks." 

Saori  Fotenos 

IT  Manager,  Reuters 


Make  a  name  for  yourself  with  Windows  Server  System. 

Microsoft  Windows  Server  System  makes  Reuters 
infrastructure  easier  to  manage.  Here's  how:  In 
the  past,  updating  Reuters  servers  deployed  at 
customer  sites  required  dispatching  a  Reuters 
technician  to  the  customer  site.  But  now,  using 
Windows  Server  2003,  Reuters  can  manage 
everything  remotely,  allowing  them  to  invest 
their  resources  in  new  products  and  added 
services.  It's  software  that  helps  you  do  more  with 
less.  Get  the  full  Reuters  story  and  a  hands-on 
management  tool  at  microsoft.com/wssystem 


Windows 
Server  System 


Windows  Server  System"  includes  these  products: 
Server  OS  Windows  Server" 


Operations  Infrastructure 

Systems  Management  Server 

Application  Center 

Operations  Manager 

Internet  Security  &  Acceleration  Server 

Windows’1  Storage  Server 

Application  Infrastructure 

SQL  Server™ 

BizTalk35  Server 

Commerce  Server 

Content  Management  Server 

Host  Integration  Server 

Information  Work  Infrastructure 

Exchange  Server 

Office  SharePoint™  Portal  Server 

Office  Live  Communications  Server 

18 


COMPUTERWORLD  March  15, 2004 


NEWS 


www.computerworld.com 


Microsoft  Likely  to  Update  Win 
Server  ’03,  but  Many  Users  Shrug 

New  edition  may  collect  feature  packs 
released  since  product’s  launch  in  April 


BY  CAROL  SLIWA 

ICROSOFT  Corp. 
confirmed  earlier 
this  month  that  it 
will  likely  intro¬ 
duce  an  update  to  Windows 
Server  2003  that  includes  the 
add-on  feature  packs  it  has 
released  since  the  product 
shipped  last  April. 

But  for  some  users  of  those 
features,  it’s  not  a  big  deal. 

“We  are  getting  what  we 
need  separately.  So  is  that  an 
attraction?  Not  necessarily,” 
said  Larry  Godec,  CIO  at  First 
American  Title  Insurance  Co. 
in  Santa  Ana,  Calif. 

“It  would  be  nice  if  they 
were  there,  because  you 
wouldn’t  have  to  go  looking 
for  them,”  said  Keith  Gilbert, 
an  enterprise  data  architect  at 
Labor  Ready  Inc.  in  Tacoma, 
Wash.  “But  it’s  not  a  huge  is¬ 
sue.  The  fact  that  they’re  out 
there  and  you  can  go  get  them, 
it’s  easy  enough.” 

But  Jeff  Price,  a  senior  di¬ 
rector  in  Microsoft’s  Windows 
Server  group,  said  many  cus¬ 


tomers  have  been  looking  to 
the  company  to  make  add-on 
features,  such  as  SharePoint 
Services  and  the  Group  Policy 
Management  Console,  “easy  to 
consume”  and  to  have  a  “high 
level  of  integration.” 

Price  noted  that  customers 
currently  pick  and 
choose  which  fea¬ 
tures  they  want  to 
add  to  their  servers 
from  Microsoft’s 
Web  site,  and  he  said 
that  process  “works 
pretty  well.”  But  Mi¬ 
crosoft  thinks  it  “can 
have  even  more  cus¬ 
tomer  success  by 
having  that  delivered 
in  a  vehicle  that’s 
easier  to  consume 
and  install  and  man¬ 
age,”  Price  added. 

Although  the  feature  packs 
are  already  designed  to  be  in¬ 
tegrated  with  Windows  Server 
2003,  Microsoft  would  need  to 
release  an  update  to  provide 
an  administrator  with  an  “in¬ 
tegrated  management  and  in¬ 


stallation  experience”  across 
all  of  the  add-on  technologies, 
Price  said. 

Godec  said  better  manage¬ 
ment  of  the  overall  pieces  of 
functionality  would  be  help¬ 
ful.  But  he  said  his  company 
would  have  to  carefully  evalu¬ 
ate  what  it  gets  today  vs.  what 
it  would  gain  from  the  new  re¬ 
lease.  “We  wouldn’t  necessari¬ 
ly  upgrade  just  for  the  sake  of 
upgrading,”  he  said. 

Gilbert  said  the 
application  testing 
needed  to  upgrade 
to  a  new  version  of 
an  operating  system 
can  be  costly  and 
time-consuming.  “I 
don’t  know  many  IT 
departments  that 
take  upgrades  light¬ 
ly,”  he  said.  “Every¬ 
one  has  to  do  due 
diligence.  You  can’t 
just  go  around  up¬ 
grading  because  Microsoft  has 
put  out  a  new  version.” 

Price  said  the  proposed  up¬ 
date  to  Windows  Server  2003 
won’t  simply  be  a  repackaging 
of  the  product  with  existing 
add-on  features.  He  said  it  also 
may  include  new  technologies 


that  have  yet  to  be  released. 

“We  will  consider  the  broad 
range  of  technologies  that  are 
ready  at  the  time  we  do  this 
update,”  Price  said.  “And 
based  on  customer  feedback, 
we’ll  see  what  we  can  put  in.” 

Wants  Choice  of  Features 

A  database  services  manager 
at  an  international  cosmetics 
manufacturer  and  retailer  said 
he  would  welcome  the  chance 
to  get  specific  new  features 
prior  to  the  next  release  of 
Windows,  code-named  Long¬ 
horn.  He  said  he  plans  to  use 
one  of  the  feature  packs  that’s 
currently  available,  Automated 
Deployment  Services.  “A  new 
release  inclusive  of  all  these 
tools  would  be  great,  as  long 
as  through  the  installation 
process,  I  can  deselect  those  I 
don’t  want,”  said  the  manager, 
who  asked  not  to  be  named. 

But  he  said  there  can  be  a 
downside  to  having  features 
available  simply  through 
check  boxes.  For  example,  the 
manager  said  he  doesn’t  want 
Internet  Information  Server 
enabled  on  database  servers, 
yet  some  administrators  who 
are  accustomed  to  having  IIS 


enabled  go  back  and  install  it. 

If  the  Windows  Server  up¬ 
date  emerges,  customers  who 
purchased  Microsoft’s  Soft¬ 
ware  Assurance  plan  for  the 
product  will  be  able  to  get  it  as 
part  of  their  maintenance  con¬ 
tracts.  They  pay  an  annual  fee 
of  25%  of  the  server  license 
cost  for  Software  Assurance. 
Price  said  Microsoft  hasn’t  de¬ 
cided  if  there  will  be  a  charge 
for  Windows  Server  cus¬ 
tomers  who  didn’t  buy  Soft¬ 
ware  Assurance. 

Price  added  that  he’s  not 
sure  when  the  server  update 
might  become  available,  al¬ 
though  it’s  expected  before 
Longhorn. 

After  initially  saying  Long¬ 
horn  would  emerge  in  late 
2005,  Microsoft  hasn’t  provid¬ 
ed  a  definitive  update  on  the 
expected  ship  date.  Neil  Char- 
ney,  a  director  of  product 
management  for  Windows, 
said  Microsoft  plans  to  release 
a  beta  version  by  the  end  of 
this  year  and  will  re-evaluate 
the  ship  date  based  on  the 
beta  feedback.  ©  45417 


WINDOWS  XP  RELOADED? 

Speculation  grows  about  a  possible  interim 
release  of  Windows  before  Longhorn: 

QuickLink  45428 

Feature-packed:  For  a  summary  of 
Windows  Server  2003  feature  packs, 
visit  our  Web  site: 

QuickLink  45420 
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LARRY  GODEC  says 
First  American 
won’t  upgrade 
“just  for  the  sake 
of  upgrading.” 


Continued  on  page  1 

Diversity 

“Small  suppliers  are  some  of 
our  best  and  most  creative 
partners  in  technology,”  added 
Linda  Dillman,  CIO  at  Ben- 
tonville,  Ark.-based  Wal-Mart 
Stores  Inc. 

Since  1994,  Wal-Mart  has 
spent  close  to  $4  billion  buy¬ 
ing  technology  from  small  or 
minority-owned  businesses, 
and  it’s  now  encouraging  its 
major  suppliers  to  do  so  as 
well. 

Unlike  larger  technology 
suppliers,  small  companies  are 
generally  more  flexible  and 
willing  to  accommodate  spe¬ 
cific  customer  needs,  Dillman 
said.  They  also  can  bring  high¬ 


ly  specialized  skills  that  larger 
vendors  may  not  always  pos¬ 
sess,  she  said.  For  instance, 
Ateb  Inc.,  a  small  pharmacy 
systems  supplier  in  Raleigh, 
N.C.,  helped  Wal-Mart  build 
an  interactive  voice-response- 
based  prescription-refill  appli¬ 
cation  after  larger  vendors 
said  they  were  unable  to  do  so. 
The  80-employee  company 
also  maintains  Wal-Mart’s  in¬ 
store  music  and  TV  program¬ 
ming  systems. 

Less  Overhead 

Small  companies  are  usually 
cheaper  from  a  contracting 
standpoint  because  they  don’t 
have  as  much  overhead  as 
their  larger  counterparts,  said 
Bruce  Carver,  vice  president 
and  CIO  at  PepsiCo  Beverages 


&  Foods  in  Chicago. 

And  having  minority  suppli¬ 
ers  is  also  “part  of  doing  good 
business,”  especially  for  com¬ 
panies  with  diverse  customer 
bases,  he  said.  With  a  large 
portion  of  PepsiCo’s  growth 
coming  in  major  urban  areas 
and  among  the  Hispanic  popu¬ 
lation,  “how  and  who  we  do 
business  with”  is  becoming 
important,  Carver  said. 

As  a  result,  PepsiCo,  which 
last  year  spent  only  about  $20 
million  with  minority-owned 
IT  suppliers,  is  taking  new 
measures  to  increase  repre¬ 
sentation  of  minorities  in  its 
IT  supplier  ranks,  Carver  said. 

For  instance,  senior  technol¬ 
ogy  executives  at  Pepsi  have 
been  asked  to  spend  at  least 
12%  more  on  minority  suppli¬ 


ers  this  year  than  they  did  last 
year.  And  all  senior  executives 
are  going  to  be  evaluated  on 
the  basis  of  “how  much  busi¬ 
ness  we  are  doing  with  mi¬ 
norities,”  he  said. 

Small  companies  tend  to  be 
more  eager  than  larger  ven¬ 
dors  for  new  business  and  are 
therefore  sometimes  more  in¬ 
vested  in  a  project,  said  Lori- 
lee  Sadler,  executive  vice  pres¬ 
ident  at  UNext.com  LLC.  The 
Deerfield,  Ill.-based  online  ed¬ 
ucation  company,  which  has 
used  both  large  and  small  sup¬ 
pliers  in  rolling  out  several  en¬ 
terprise  applications,  discov¬ 
ered  that  smaller  suppliers 
display  more  staff  continuity 
and  “commitment  to  our  suc¬ 
cess,”  Sadler  said. 

Even  so,  small  companies 


and  suppliers  owned  by  wo¬ 
men  or  minorities  still  need  to 
constantly  fight  the  percep¬ 
tion  that  they  aren’t  equipped 
to  handle  difficult  projects, 
said  Robert  Blackwell  Jr., 
founder  and  president  of  Chi¬ 
cago-based  application  devel¬ 
oper  Electronic  Knowledge 
Interchange  Inc.  As  a  result  of 
that  perception,  small  suppli¬ 
ers  are  often  forced  into  sub¬ 
contracting  roles  for  larger 
technology  companies,  even 
though  they  might  be  the  ones 
providing  the  specialized 
skills,  Blackwell  said. 

Moreover,  “minority  compa¬ 
nies  rarely  get  more  than  one 
chance”  at  a  project,  he  said, 
so  “there’s  a  certain  amount  of 
paranoia  about  screwing  up.” 
©  45416 
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You  like  your  job.  And  the  boss  likes  you  - 
as  long  as  the  SAN  is  up  and  running. 

Keep  it  that  way  with  NetWisdom  and  Xgig  Analyzer,  the  SAN  monitoring  and  analysis 
tools  that  identify  catastrophic  events  before  they  shut  your  network  down.  SAN  failure 
occurs  after  an  accumulation  of  invisible  errors.  Finisar’s  NetWisdom  and  Xgig  Analyzer 
proactively  identify  and  troubleshoot  network  errors,  reducing  business  losses,  tech¬ 
nology  costs,  and  customer  service  voids. 

Research  shows  that  SAN  downtime  can  cost  organizations  $100,000  per  minute, 
or  more.*  NetWisdom  and  Xgig  help  you  avoid  these  costs  by  conducting  accurate 
performance  tuning  and  capacity  planning. 

When  data  stops  moving,  so  do  the  dollars.  Be  part  of  the  solution:  monitor  your 
SAN  with  Finisar  network  tools  and  stop  degradation,  CRC  errors  and  events  that  can 
impact  your  most  critical  business  data  and  transactions. 

View  our  web  seminar,  including  a  customer  case  study  and  demo  of  NetWisdom  by 
visiting  www.finisar.com/nw 


Finisar  has  been  speeding  up  networks  and 
delivering  best-of-breed  products  and  testing 
solutions  since  1988.  NASDAQ:  FNSR. 

www.finisar.com/nw 
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Better  Data  ~  Better  Care 


Start  with  technology  to  improve  doctor/ 
patient  relations.  Sybase  mobile  solutions 
and  Sybase  M-Business  Anywhere  “give 
physicians  access  to  apps  and  records 
right  at  the  point  of  patient  care. 
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Greater  Security 

Real-time  transactions  between 
doctors  and  pharmacists.  Sybase  SQL 
Anywhere  and  Sybase  compliance 
solutions  are  the  ideal  prescription  for 
data  security  and  patient  privacy. 


feware  Conpettrc  Araiysts.  JOOt 
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Smarter  Administration 

Sybase  Data  Management  solutions  help 
healthcare  enterprises  respond  faster 
to  patients,  payers  and  providers  while 
reducing  the  costs  and  errors  of  paper- 
based  processes. 


Sybase  is  the  world's  number  one 
provider  of  mobile  middleware?1 
You'll  find  Sybase  technology  at 
work  in  over  80%  of  the  top  100 
companies  in  the  FORTUNE  500.® 
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Start  your  journey  to  the 
Unwired  Enterprise. 

1 

S'ST- r’  '  I 

_ 


■  ■ 


The  Enterprise.  Un  wired. 
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Download  your  free  copy  of  the  Sybase/Intel 
White  Paper:  Unwiring  the  Enterprise  at 


www.sybase.co 


23  COMPUTERWORLD  March  15, 2004 


MARYFRAN  JOHNSON 


IT  Passion = FT  Power 


ASSION  CAN  PRODUCE  amazing  results.” 
That’s  Shelley  McIntyre  of  The  Guardian 
Life  Insurance  Company  of  America 
speaking  last  week  at  Computerworld’ s 
Premier  100  IT  Leaders  Conference  in 

ing  IT  leadership  issues 


Palm  Desert,  Calif.  She 
was  one  of  more  than  700 
IT  and  business  execu¬ 
tives  attending  the  event. 

(See  pages  6-8  and 
QuickLink  a4100  for  the 
full  conference  coverage.) 

Although  McIntyre,  a 
VP  of  business  technolo¬ 
gy  services  at  the  New 
York-based  insurer,  was 
referring  specifically  to 
Guardian’s  award-win¬ 
ning  project  involving  an 
online  annuity  system, 
her  comment  could  just  as  easily  sum 
up  the  impact  of  two  powerful  days  of 
peer  connection  and  conversation. 

I  don’t  use  the  word  powerful  light¬ 
ly  here.  The  collective  will  of  IT  lead¬ 
ers  can  —  and  should  —  directly  in¬ 
fluence  technology  products  and  the 
vendors  that  sell  them. 

The  most  striking  endorsement  of 
that  idea  came  in  a  talk  by  Alan  Paller, 
executive  director  of  research  at  the 
SANS  Institute  [Quick  Link  45335]. 
After  demonstrating  how  easily  hack¬ 
ers  can  break  into  ostensibly  secure 
corporate  networks,  Paller  urged  IT 
leaders  to  use  their  collective  power 
to  force  vendors  to  deliver  safer  soft¬ 
ware  by  requiring  certain  security 
settings.  He  noted  how  Oracle  has  al¬ 
ready  complied  with  such  a  demand 
by  the  U.S.  Department  of  Energy. 

Will  Paller’s  call  to  action  have  a  re¬ 
sult?  It  certainly  should.  At  least  75% 
of  the  audience  members  —  surveyed 
after  his  talk  —  declared  their  intent 
to  start  requiring  minimum  security 
settings  in  all  future  systems  purchas¬ 
es,  as  well  as  in  the  external  systems 
connecting  to  their  networks. 

In  other  audience  survey  questions 
at  the  conference  [available  in  a  regis¬ 
tered  part  of  our  Web  site  at  Quick- 
Link  45115],  we  asked  the  assembled 
executives  to  identify  their  most  press- 
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and  most  critical  projects. 
Topping  the  leadership  is¬ 
sue  list  were  implementing 
business  process  re-engi¬ 
neering,  streamlining  oper¬ 
ations  and  planning  the  fu¬ 
ture  of  the  IT  infrastruc¬ 
ture.  Singled  out  as  the 
most  important  IT  projects 
were  those  involving  busi¬ 
ness  intelligence/data  man¬ 
agement,  enterprise  inte¬ 
gration  and  Web  services. 

Collecting  useful,  ac¬ 
tionable  ideas  about  all  of  those  top¬ 
ics  and  having  the  time  to  talk  them 
over  with  peers  are  the  greatest  bene¬ 
fits  of  a  conference  like  the  Premier 
100.  We  also  staged  the  first-ever  de¬ 
bate  between  Nicholas  Carr,  author  of 
the  infamous  Harvard  Business  Re¬ 
view  article  “IT  Doesn’t  Matter,”  and 
Bob  Metcalfe,  Ethernet  inventor  and 
now  venture  capitalist.  That  exchange 
stirred  up  its  share  of  passions,  as 
well  [see  Quick  Link  45332  for  a  tran¬ 
script  of  the  debate]. 


Our  theme  this  year  was  “Mapping 
the  Future  of  IT,”  which  may  sound 
rather  grandiose  but  is,  in  fact,  what 
IT  executives  do  whenever  they  get 
together  to  talk  strategy  and  compare 
best  practices.  No  matter  what  indus¬ 
try  segment  they  call  home,  CIOs  and 
senior  IT  managers  have  many  core 
issues  in  common.  Vendor  issues. 
User  issues.  Budget  issues.  Even  regu¬ 
latory  compliance  issues. 

You  can  see  that  commonality  even 
within  the  diversity  of  the  12  projects 
we  singled  out  of  the  Premier  100  to 
honor  as  the  “Best  in  Class”  winners 
(see  the  special  supplement  attached 
to  this  page).  They  include  massive 
undertakings  like  J.P.  Morgan’s  grid 
computing  project,  Northrop  Grum- 
man’s  integration  of  its  multibillion- 
dollar  acquisitions  and  the  U.S.  Air 
Force’s  far-flung  server  consolidation 
project.  They  also  include  an  innova¬ 
tive  Web  services  project  at  Lincoln 
Financial,  an  industry-leading  central¬ 
ized  call  accounting  project  at  Wynd- 
ham  International  hotels  and  the  cre¬ 
ation  of  the  state  of  Ohio’s  user- 
friendly,  self-service  tax-filing  portal. 

Yet  for  all  their  surface  differences, 
each  of  the  winning  projects  embod¬ 
ies  what  so  many  of  our  Premier  100 
conference  attendees  have:  That  un¬ 
derlying  passion  that  can  and  will 
produce  amazing  results.  ©  45378 


PIMM  FOX 

Using  IT  to 
Tap  Experts’ 
Know-how 


THE  U.S.  GOVERNMENT 
is  using  basic  knowl¬ 
edge  management 
techniques  to  offer  timely 


and  valuable  advice  about  how  to  do 
business  abroad. 

At  the  Department  of  Commerce, 
a  commercial  service  called  the  DOC 
Insider  is  adopting  technology  for 
knowledge  capture  and  management 
from  Bellevue,  Wash.-based  AskMe 
Corp.  The  service  uses  the  technology 
to  accelerate  the  counseling  it  offers  to 
U.S.  companies  seeking  to  engage  in 
international  trade. 

The  DOC  Insider  has  been  using 
Web-based  technology  to  create  a 
knowledge  network  connecting  its  100 
offices  in  the  U.S.,  another  150  in  80 
countries  overseas  and  a  group  of  ap¬ 
proximately  1,700 
U.S.  trade  specialists 
who  have  expertise 
in  what  it  takes  to 
succeed  abroad. 

These  specialists  can 
tell  you  what  trade 
show  to  attend  if 
you’re  interested  in 
selling  medical 
equipment  in  Ger¬ 
many  or  what  papers 
to  file  if  you’re  trying 
to  expand  your  soft¬ 
ware  business  into 
Japan. 

In  the  past,  there  was  no  way  to  or¬ 
ganize  what  these  experts  knew,  or 
even  how  to  get  in  touch  with  them 
once  they  were  identified. 

Laura  McCall,  program  manager  for 
the  DOC  Insider,  says  using  AskMe’s 
system  is  part  of  the  department’s  ful¬ 
fillment  of  its  mandate  to  help  U.S. 
businesses  compete  abroad.  “We  have 
a  dispersed,  worldwide  organization 
with  pockets  of  information  every¬ 
where,”  she  says.  The  DOC  Insider’s 
aim  is  to  help  U.S.  companies  do  things 
such  as  perform  international  market 
research  or  locate  overseas  partners. 
“We  want  to  sit  down  and  make  sure 
you’ve  identified  a  good  market  and 
that  you  are  export-ready,”  she  says. 

Each  trade  expert  accesses  the 
knowledge  network  via  the  Web  and 
logs  answers  to  questions.  “That  way, 
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4  Lincoln  Financial’s  Web 

services  system  syndicates 
company-specific  content  and 
applications  on  its  partners’ 
Web  sites. 

6  The  U.S.  Air  Force  moves 
to  commercial  systems  to 
help  consolidate  infrastructure 
and  centralize  management. 

6  Reliant  Pharmaceuticals 

deploys  a  voice-response 
sales  force  automation  system 
instead  of  shelling  out  the  cash 
for  handhelds  for  its  users. 


4A  Northrop  Grumman 

IU  saves  $57  million  a  year 
by  integrating  the  IT  systems  of 
acquisition  Litton  Industries. 

41 1  After  a  vendor  update  falls 
I L  through.  Guardian  Life  In¬ 
surance  forges  ahead  with  its 
annuity-processing  system. 

4A  DHL’s  project  to  consoli- 
10  date  its  eight  North  Ameri¬ 
can  data  centers  into  one  facility 
saves  $24  million  in  a  year. 

MJ.P.  Morgan’s  grid  com¬ 
puting  project  will  eventu¬ 
ally  combine  the  power  of 
about  2,000  CPUs,  saving  mil¬ 
lions  of  dollars  annually. 

4A  Calpine  Corp.  generates 
10  millions  of  dollars  in  new 
revenue  by  creating  a  set  of 
real-time  interfaces  to  energy 
markets. 

4A  Visa  U.S.A.’s  cardholder 
ID  dispute-resolution  system 
increases  customer  satisfaction 
while  chopping  millions  in  costs. 

AA  A  call-accounting  system 
&U  at  Wyndham  hotels  cuts 
phone  costs  by  storing  variable- 
rate  tables  on  a  central  server. 

AA  The  Ohio  Business 
LL  Gateway  lets  businesses 
conduct  transactions  online 
with  four  state  agencies,  slash¬ 
ing  the  state’s  costs  by  42%. 

M  Nortel  Networks’  inte¬ 
grated  CRM  system  saves 
the  company  $15  million  and 
reduces  its  abandoned-call 
rate  by  5%. 


FT  LEADERS  2004 


These  projects  by  Premier  100  IT  Leaders 
resulted  in  more  nimble  organizations  that 
met  business  imperatives,  saved  millions, 
improved  customer  service  or  boosted 
bottom-line  revenue.  Here’s  an  inside  look 
at  their  trials  and  triumphs. 
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Up  with  capacity.  Down  with  complexity.  HP 
StorageWorks  Enterprise  Virtual  Array  combines 
storage  with  the  ability  to  pool  resources,  making 
it  easy  to  control  your  information.  Virtualization 
ensures  capacity  is  dynamically  expanded 
without  disrupting  service,  giving  information 
room  to  breathe,  and  business  room  to  change. 
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EDITOR’S  NOTE 


Simple 

Solutions 


With  so  many  choices  available  to  us  in  our  every¬ 
day  lives,  it’s  the  simple  solution  that  often  goes  un¬ 
explored.  Not  so  with  this  year’s  Best  in  Class  award 
winners,  who  took  some  roads  less  traveled.  They 
stopped,  stepped  back,  took  in  the  entire  breadth  of 
their  IT  environments  and  then  recast  their  existing  systems.  Their 
choices  not  only  created  more  nimble  IT  organizations,  but  also  ad¬ 
dressed  business  imperatives  in  creative,  efficient  ways. 


Take  John  M.  Gilligan,  whose 
makeover  of  the  U.S.  Air  Force’s 
IT  systems  included  consolidat¬ 
ing  infrastructure,  centralizing 
management  and  standardizing 
applications.  The  result:  annual 
savings  of  about  $200  million. 

Or  Steve  J.  Bandrowczak,  whose 
project  at  DHL  International  to 
consolidate  eight  data  centers 
into  one  state-of-the-art  facility 
is  saving  the  freight  company 
about  $24  million  a  year. 

Now  in  its  third  year,  Comput- 
erworld’ s  Premier  100  Best  in 
Class  awards  honor  such  lead¬ 
ers.  They  are  a  select  subset  of  the  2004 
Premier  100  honorees  who  have  created 
striking  business  value  through  cutting- 
edge  technology  projects.  To  choose  this 
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is  special  projects  editor 
at  Computerworld. 
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year’s  12  winners,  a  panel  of 
outside  judges  and  Computer- 
world  editors  reviewed  the 
project  candidates,  looking  in 
particular  for  signs  of  measur¬ 
able  payback,  learning  experi¬ 
ences,  strategic  importance  to 
the  business,  substantive  cus¬ 
tomer  impact  and  new  revenue 
opportunities  or  cost  savings. 

Many  of  these  IT  leaders  ap¬ 
plied  the  basic  idea  of  simplifi¬ 
cation  to  some  big  projects.  But 
with  grandness  of  scale,  of 
course,  comes  friction  and  risk. 
We  hope  that  reading  about 
how  these  12  award-winners  overcame 
those  challenges  will  put  you  on  your 
own  path  to  simplifying  and  enhancing 
your  IT  environment.  O  44670 


MART  ANI  IMF  Leaders  Converge:  For  news  coverage  from  the  5th  Annual  Computer- 
mUKlL  UrtLiilL  world  Premier  100  IT  Leaders  conference,  held  last  week  in  Palm  Desert,  Calif., 
visit  our  Web  site:  QuickLink  a1660 

Learn  From  the  Best:  The  Premier  100  IT  Management  Best  Practices  report  is  chock-full  of  tips 
on  managing  your  staff,  working  with  vendors  and  proving  IT  value.  This  useful  guide  is  available  at  the 
online  Computerworld  Store:  QuickLink  a4080 


The  Judges 


Special  thanks  go  to 
our  panel  of  judges,  themselves 
Premier  100  IT  Leader  alumni, 
who  helped  evaluate  dozens 
of  candidates.  They  are: 

DENNIS  S. 
CALLAHAN 

Senior  vice 
^  president  and 
,  CIO,  Guardian 
Life  Insurance  Company  of  Amer¬ 
ica,  New  York  (2003  honoree) 

DANIEL  W. 
GARR0W 

Senior  vice 
president  of  IS 
and  CIO,  Mohe- 
gan  Sun  Casino,  Uncasville, 
Conn.  (2003  honoree) 

RON 

GLICKMAN 

Senior  vice  pres¬ 
ident  and  CIO, 
DFS  Group  Ltd., 
San  Francisco  (2003  honoree) 

FREDRICK  R. 
POND 

Director  of  in¬ 
formation  ser¬ 
vices,  Schnitzer 
Group,  Portland,  Ore.  (2003 
honoree) 

MICHAEL  J. 
RAGUNAS 

Vice  president, 
technology  strat¬ 
egy  and  archi¬ 
tecture,  Staples  Inc.,  Framing¬ 
ham,  Mass.  (2002  honoree) 

CURTIS 
ROBB 

Senior  vice 
president  and 
chief  technology 
officer.  Delta  Technology  Inc., 
Atlanta  (2002  honoree) 

Note:  Judges  evaluated  only 
those  candidates  outside  their 
own  industries. 
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PREMIER  100  IT  LEADERS  2004  BEST  IN  CLASS 


SYNDICATES  CONTENT  WITH 

Web  Services  System 


BY  MARY  BRANDEL 

T’S  one  thing  to  create 
a  business  mantra  and 
quite  another  to  live  by 
it.  What’s  even  rarer  is 
for  that  mantra  to  in¬ 
spire  the  development 
of  an  IT  system  that  im¬ 
proves  a  company’s  sales 
distribution  and  time  to 
market,  boosts  partner  rela¬ 
tionships  and  customer  sat¬ 
isfaction,  reduces  Web  site 
costs  and  increases  corpo¬ 
rate  recognition. 

But  that’s  what  the  IT  team 
at  Lincoln  Financial  Group 
in  Philadelphia  did  in  Janu¬ 
ary  2003,  when  it  went  live 
with  Service  Broker,  a  Web 
services-based  system  that 
syndicates  Lincoln-specific 
content  and  applications  on 
its  partners’  Web  sites. 

It  wasn’t  a  project  that  had 
an  easy  solution.  Lincoln  is  a 
$4.6  billion  provider  of  life 
insurance,  retirement  prod¬ 
ucts  and  wealth  manage¬ 
ment  services.  It  distributes 
its  offerings  through  finan¬ 
cial  advisers,  banks  and  in¬ 
dependent  brokers. 

When  Jason  Glazier,  chief 
technology  and  e-commerce 


officer  at  Lincoln,  joined  the 
company  in  2001,  the  corpo¬ 
rate  mantra  was,  “  We  want 
to  be  the  partner  of  choice,’  ” 
he  says.  “So  I  asked,  What 
does  that  mean  from  an 
e-commerce  perspective?” 

One  answer  was  tighter 
integration  with  broker  Web 
sites.  In  most  of  the  insur¬ 
ance  industry,  if  consumers 
want  to  access  their  ac- 


Lincoln 

Financial  Group 

www.lfg.com 


■  Business:  Lincoln  Finan¬ 
cial  Group  offers  annuities, 
life  insurance,  mutual  funds, 
managed  accounts  and  other 
services.  In  2002,  its  annual 
consolidated  revenue  was 
$4.6  billion. 

■  Project  champion: 

Jason  Glazier 

■  IT  department:  800 

■  Project  payback:  The 

$545,000  project  has  yielded 
an  increased  growth  rate  with 
syndicated  partners,  improved 
time  to  market  and  reduced 
Web  development  costs. 


counts  or  download  a  form 
from  a  broker  site,  they  click 
on  a  link  that  takes  them  to 
the  insurance  provider’s  site, 
where  they  input  a  separate 
password  or  user  ID.  Lincoln 
wanted  to  go  a  step  further, 
providing  content  and  ac¬ 
count  access  within  its  part¬ 
ner  Web  sites,  as  well  as  sin¬ 
gle  sign-on  for  consumers. 

The  first  problem  Glazier’s 
group  encountered  was 
brand  conflict  —  brokers 
wanted  their  sites  to  retain 
their  own  look  and  feel. 
Clearly,  if  Lincoln  wanted  to 
be  a  “partner  of  choice,”  it 
also  had  to  hand  over  the 
branding  reins. 

The  second  problem  was  a 
technical  one.  Simply  outlin¬ 
ing  the  Lincoln  content  in  an 
HTML  frame  wouldn’t  pro¬ 
vide  the  partner’s  look  and 
feel.  A  pure  Web  services 
approach  was  also  out,  since 
most  of  Lincoln’s  clients 
couldn’t  support  that  kind  of 
system.  “It  is  not  a  hassle- 
free  implementation,  since 
the  partner  must  then  proc¬ 
ess  the  XML/SOAP  mes¬ 
sages,”  Glazier  says. 

For  a  short  time,  Lincoln 
maintained  subsites  for  its 
partners  that  wanted  them, 
and  those  sites  linked  to  re¬ 
quested  content.  However, 
maintenance  of  the  subsites 
was  burdensome. 

The  ultimate  answer  was 
Service  Broker.  It  took  three 
developers  four  months  to 
build  the  pilot  of  Service 
Broker,  which  is  a  Web  ser¬ 
vices-based  application  with 
a  front  end  that  Glazier  calls 
a  servlet.  When  the  servlet  is 
installed  on  a  partner’s  serv¬ 
er,  it  provides  a  wrapper  that 
can  accept  Lincoln’s  content 
and  applications  and  still 
maintain  the  partner’s  look 
and  feel. 

The  servlet  manages  many 
of  the  functions  the  partner 
would  have  to  manage  in  a 
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Web  services  application, 
such  as  authentication,  digi¬ 
tal  signatures,  passwords  and 
page  rendering.  When  the 
partner  wants  to  include  Lin¬ 
coln  content  or  an  applica¬ 
tion,  it  needs  to  insert  just 
one  line  of  code,  Glazier  says. 

Because  the  project  repre¬ 
sented  such  a  new  idea,  one 
challenge  was  to  develop  a 
demo  so  customers  could  vi¬ 
sualize  the  system’s  capabili¬ 
ties.  This  entailed  keeping  a 
close  watch  on  how  much 
money  was  initially  invested. 


“We  knew  they  may  not  take 
us  seriously  because  insur¬ 
ance  companies  are  not  usu¬ 
ally  known  as  innovative,” 
Glazier  says. 

When  customers  did  see 
it,  says  Rob  Pal,  Lincoln’s 
vice  president  of  e-business 
and  production  services, 
about  40%  were  interested 
in  this  type  of  full-scale  syn¬ 
dication.  Currently,  Service 
Broker  is  fully  implemented 
at  five  client  sites.  Imple¬ 
mentation  is  in  progress  at 
three  others,  and  five  more 


clients  are  reviewing  the 
Service  Broker  agreement. 

There  was  some  resistance 
on  the  part  of  clients  that 
didn’t  want  an  outside  source 
controlling  technology  on 
their  sites,  according  to  Mat¬ 
thew  Josefowicz,  manager  of 
the  insurance  group  at  Ce- 
lent  Research  in  New  York. 
However,  resistance  was 
overcome  by  the  applica¬ 
tion’s  power  and  ease  of  use. 

According  to  Glazier,  Ser¬ 
vice  Broker  was  not  only 
completed  on  time  and  un¬ 


der  budget,  at  a  cost  of 
$545,000,  but  it  has  also  ex¬ 
ceeded  business  objectives. 

For  instance,  since  the  de¬ 
ployment,  Lincoln’s  growth 
rate  with  syndicated  partners 
has  increased  manyfold,  ac¬ 
cording  to  Glazier.  In  three 
cases,  clients  have  granted 
Lincoln  premier  “shelf  space” 
on  their  Web  sites.  Time  to 
market  has  also  improved;  it 
now  takes  days  to  syndicate 
customized  content  and  ap¬ 
plications,  vs.  the  months  it 
previously  required. 

Service  Broker  has  also  re¬ 
duced  Web  subsite  develop¬ 
ment  costs,  each  of  which 
averaged  $115,000  in  annual 
expenses.  And,  according  to 
Pal,  it  has  improved  partner 
relationships.  “In  one  in¬ 
stance,  we  were  new  to  a 
customer,  and  now  we’re 
one  of  their  top  carriers,”  he 
says.  “There  are  a  lot  of  fac¬ 
tors  involved,  but  syndica¬ 
tion  is  one  of  them.” 

In  addition,  Glazier  says, 
there  has  been  a  significant 
increase  in  the  sale  of  Lin¬ 
coln’s  products  and  services 
through  the  brokers  using 
the  technology.  “There  is  no 
doubt  in  our  management’s 
mind  that  our  syndicated 
technology  relationship  is 
partly  responsible  for  this,” 
he  says. 

According  to  Josefowicz, 
Lincoln  is  the  only  insurer 
that  doesn’t  require  con¬ 
sumers  to  leave  a  partner’s 
Web  site  to  access  its  infor¬ 
mation.  “Lincoln’s  initiative 
makes  it  easier  for  partner 
distributors  to  do  business 
with  them,  which  Celent  re¬ 
search  has  shown  to  be  a  crit¬ 
ical  factor  in  driving  carrier 
choice  among  independent 
agents,”  he  says.  ©  44445 


Brandel  is  a  freelance 
writer  in  Grand  Rapids, 
Mich.  Contact  her  at  mary. 
brandel@comcast.net. 
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BY  PATRICK  THIBODEAU 

CIO  JOHN  M.  GILLIGAN  is 
leading  a  makeover  of  the 
U.S.  Air  Force’s  IT  systems 
that  involves  consolidating 
infrastructure,  centralizing 
management,  standardizing 
applications  and  building  a 
foundation  for  Web  services. 
It’s  a  vast  project,  affecting 
some  500,000  personnel  sta¬ 
tioned  across  110  military  in¬ 
stallations. 

It’s  also  a  network-centric 
project,  which  will  give  the 
Air  Force  the  means  of  “lev¬ 
eraging  information  across 
the  spectrum  of  our  war¬ 
fighting  operations  to  give  us 
significant  combat  advan¬ 


tage,”  says  Gilligan,  who 
oversees  the  agency’s  multi- 
billion-dollar  IT  operations. 

When  this  project  began  in 
2001,  the  Air  Force’s  IT  land¬ 
scape  was  decentralized, 
fragmented  and  expensive  to 
maintain.  While  the  agency 
had  strong  IT  operations,  it 
lacked  consistent  technical 
standards  and  operating  pro¬ 
cedures.  Without  uniformity, 
IT  managers  couldn’t  be  as¬ 
sured,  for  instance,  that  a 
new  enterprisewide  applica¬ 
tion  would  work  everywhere. 

To  correct  these  problems, 
cut  IT  costs  and  improve 
services,  the  Air  Force  began 
consolidating  servers  and 


U.S.  Air  Force 

www.af.mil 


■  Organization:  Includes  110 
bases,  500,000  personnel  and 
10  CIOs  at  major  commands 

■  Project  champion: 

John  M.  Gilligan 

■  IT  department:  80,000 

■  Project  payback:  E-mail 
servers  have  been  cut  from 
1,400  to  fewer  than  300.  Re¬ 
mote  management  of  desktops 
has  reduced  costs  by  50%. 
Some  2,000  Air  Force  person¬ 
nel  have  been  freed  up  to 
move  to  other  jobs. 


networks  and  setting  uni¬ 
form  policy  and  technical 
standards.  It  also  began 
moving  to  commercial  sys¬ 
tems,  which  were  already  in 
wide  use  on  many  bases, 
such  as  Microsoft  Corp.’s 
Active  Directory  and  Sys¬ 
tems  Management  Server,  as 
well  as  Hewlett-Packard 
Co.’s  OpenView  for  systems 
and  network  management. 

“We  really  didn’t  have 
much  of  an  option,”  says 
Gilligan.  “To  do  what  we 
wanted  to  do,  we  had  to  rely 
on  commercial  technology  — 
it  works,  and  it’s  pretty  good.” 

In  adopting  commercial 
technology,  the  Air  Force  is 


Reliant 

GETS  FAST  SALES  DATA  WITH 


Interactive  Voice 


BY  BOB  BREWIN 

RONALD  J.  CALDERONE,  CIO 
at  Reliant  Pharmaceuticals 
LLC,  discovered  that  when 
it  comes  to  building  a  sales 
force  automation  system, 


the  human  voice  makes  for 
a  very  good  interface  —  at  a 
very  good  price. 

Reliant,  a  privately  held 
company  in  Liberty  Corner, 
N.J.,  that  sells  hypertension 


beta-blockers  and  cardiac 
drugs,  needed  timely  data 
from  its  salespeople,  who 
call  on  physicians  who  pre¬ 
scribe  such  medications.  But 
Calderone  quickly 
determined  that  it 
would  cost  $4  mil¬ 
lion  to  $6  million  to 
equip  Reliant’s  sales 
force,  which  is  pro¬ 
jected  to  grow  to 
900,  with  handheld 
computers  and  link 
them  into  a  sales 
force  automation 
system  like  those 
used  by  major  drug  compa¬ 
nies.  He  simply  didn’t  have 
that  money  in  his  budget. 

That’s  when  Calderone 
decided  to  tap  an  asset  the 


salespeople  already  had  — 
their  voices  —  and  couple 
that  with  an  interactive 
voice-response  (IVR)  sys¬ 
tem  called  Victor,  which 

stands  for  Voice  In¬ 
teractive  Tracking 
&  Operations  Re¬ 
pository.  The  sys¬ 
tem  provides  the 
company  with  de¬ 
tailed  and  timely 
data  on  sales  calls 
accessible  from  a 
SQL  database. 

While  Calderone 
declines  to  provide 
specific  financial  details,  he 
says  Reliant  developed  Vic¬ 
tor  using  a  combination  of 
commercial  speech-recogni¬ 
tion  technologies  for  “a  cou- 


Ronaid  J.  Calderone, 
CIO,  Reliant  Pharma¬ 
ceuticals  LLC 
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A  major  challenge  was 
overcoming  cultural  resis¬ 
tance  from  IT  organizations 
that  were  used  to  some  de¬ 
gree  of  independence. 

First,  Gilligan  got  feedback 
from  top  Air  Force  officials. 
He  then  developed  measure¬ 
ment  metrics  and  helped 
foster  competition  among 
various  commanders  in 
meeting  project  objectives. 
With  10  CIOs  at  major  com¬ 
mands  reporting  to  Gilligan, 
the  competition  is  such  “that 
one  organization  wants  to  be 
out  front,  so  they  actually 
accelerate,”  he  says. 

The  Air  Force  has  nearly 
completed  its  network  and 
server  consolidation  and  es¬ 
timates  that  new  abilities 
such  as  remote  desktop 
management  are  helping  it 
save  $200  million  per  year. 

“Our  objectives  are  the 
same:  to  give  our  war  fighters 
a  consistent,  easily  accessible 
set  of  capabilities  anywhere 
in  the  world,”  says  Gilligan. 
“And  we  also  hope  to  get  the 
benefit  of  some  cost  efficien¬ 
cies.”  O  44362 


following  a  practice  that  has 
been  gaining  steam  since  the 
Clinton  administration.  Fed¬ 
eral  agencies  have  been  re¬ 
placing  legacy  systems  with 
commercial  ones  with  the 
goal  of  improving  interoper¬ 
ability  and  integration  and 
reducing  costs. 

The  Air  Force’s  push  is 
part  of  a  broader  U.S.  De¬ 
partment  of  Defense  goal  for 
network-centric  services  de¬ 
livery.  But  the  Air  Force  has 
been  “a  little  bit  of  a  leader” 
in  bringing  together  com¬ 
mercial  off-the-shelf  soft¬ 
ware  with  existing  systems 
to  satisfy  those  objectives, 
says  Ray  Bjorklund,  an  ana¬ 
lyst  at  Federal  Sources  Inc. 
in  McLean,  Va.  The  Air 
Force  work  is  influencing 
similar  efforts  at  the  Navy 
and  DOD,  he  says. 

But  the  Air  Force  is  hold¬ 
ing  onto  one  proprietary 
technology:  its  security  sys¬ 
tems.  “The  code  is  not  avail¬ 
able  commercially,  and  we 
believe  that  gives  us  some 
additional  level  of  confi¬ 
dence,”  says  Gilligan. 


H  [We’re]  leveraging  information  across  the  spectrum  of  our  war¬ 
fighting  operations  to  give  us  significant  combat  advantage. 

-  JOHN  M.  GILLIGAN.  CIO,  U.S.  Air  Force 


pie  of  hundred  thousand 
dollars.”  He  says  the  system, 
which  the  company  started 
building  in  early  2002  and 
rolled  out  to  its  entire  sales 
force  about  a  year  later,  “had 
a  payback  of  much  less  than 
a  year.” 

Dan  Miller,  an  analyst 
at  Zelos  Group  Inc.  in  San 
Francisco,  says  IVR  systems 
offer  a  low-cost  alternative 
to  mobile  hardware  and 
sales  force  automation 
software. 

“[IVR]  systems  are  not 
expensive,  and  they’re  not 
rocket  science,”  Miller  says. 

“The  true  payback  is  time¬ 
liness,”  says  Calderone,  who 
notes  that  before  Victor,  the 
Reliant  sales  force  used  pa¬ 


per  forms  for  call  reports. 
That  information  took  eight 
weeks  to  trickle  in  from  an 
outside  data  entry  contrac¬ 
tor.  Now,  Reliant  gets  the 
results  of  those  sales  calls 
overnight,  he  says. 

Using  voice  prompts,  Vic¬ 
tor  guides  sales  personnel 
through  a  series  of  questions 
analogous  to  data  fields, 
such  as  doctors  called,  loca¬ 
tion,  practice  and  other  in¬ 
formation.  Responses  are 
stored  in  a  SQL  database. 
Victor  is  so  easy  to  use, 
Calderone  says,  that  user 
training  takes  about  an  hour. 

Robin  McWilliams,  Re¬ 
liant’s  manager  for  telecom¬ 
munications,  says  it  wasn’t 
any  more  difficult  to  inte- 


Reliant 

Pharmaceuticals  LLC 

www.reliantrx.com 


■  Business:  Markets  phar¬ 
maceutical  products  to  U.S.- 
based  physicians.  Reliant  has 
more  than  190  corporate  em¬ 
ployees  and  750  sales  reps. 

■  Project  champion: 

Ronald  J.  Calderone 

■  IT  department:  19 

■  Project  payback:  IVR  sys¬ 
tem  was  installed  at  a  fraction 
of  the  cost  of  handheld  com¬ 
puters.  Results  of  sales  calls 
are  now  received  overnight, 
instead  of  the  previous  turn¬ 
around  of  eight  weeks. 


grate  data  from  Victor  into 
the  company’s  systems  than 
it  would  be  to  integrate  any 
other  type  of  data.  Thanks  to 
Victor,  “voice  is  just  another 
form  of  data,”  he  says. 

Though  Reliant  built  Vic¬ 
tor  with  existing  IVR  soft¬ 
ware  and  hardware,  including 
Dialogic  voice-processing 
boards  from  Intel  Corp.  and 
speech  software  from  Nuance 
Communications  Inc.  and 
the  Sony  Pictures  division  of 
Sony  Corp.,  Calderone  says 
the  company  has  32  patents 
pending  on  Victor.  He  adds 
that  Reliant  is  now  looking 
for  a  marketing  partner  to 
sell  the  system  —  which 
could  further  add  to  this 
project’s  payback.  O  44371 
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The  power  to  control  pretty  much  everything 

A  constantly  changing  business  needs  IT  that  changes 
with  it.  HP  OpenView  management  software,  used  by  every 
Fortune  100  company,  lets  you  see,  control  and  automate 
a  mixed  IT  environment  from  any  location.  The  result? 

Your  IT  stays  in  sync  with  the  demands  of  your  business, 
and  suddenly  change  doesn’t  seem  like  such  a  scary  thing. 
www.hp.com/info/openview 


©2004  Hewlett-Packard  Development  Company,  L.P 


invent 


PREMIER  100  IT  LEADERS  2004  BEST  IN  CLASS 


Shelman’s  team  had  to  in¬ 
tegrate  those  separate  groups 
into  one  centrally  managed 
shared  service,  migrate  Lit- 
ton’s  Active  Directory  infra¬ 
structure  to  its  own  corpo¬ 
rate  IT  resource  and  move 
eight  e-mail  environments  to 
a  corporatewide  Exchange 
system.  The  group  also  con- 


BY  MARY  BRANDEL 

ou  know  you’ve 
done  something 
right  when  you 
can  apply  the 
wisdom  gained 
from  one  project 
to  save  time  and  money  on 
the  next.  That’s  the  experi¬ 
ence  Thomas  W.  Shelman’s 
team  at  Northrop  Grumman 
Corp.  had  when  it  completed 
the  huge  IT  integration  proj¬ 
ect  necessitated  by  the  ac¬ 
quisition  of  $5.1  billion  Lit¬ 
ton  Industries  Inc.  in  2001. 

Considering  Northrop 
Grumman’s  growth-through- 
acquisition  strategy,  that  was 
a  pretty  important  outcome. 
Since  Litton,  Northrop  has 
acquired  $2.6  billion  New¬ 
port  News  Shipbuilding  and 
$10.7  billion  TRW.  According 
to  Shelman,  it  has  integrated 
those  IT  systems  in  half  the 
time  it  took  to  do  the  Litton 
integration. 

“We  made  sure  we  cap¬ 
tured  processes  of  integration 
so  we  could  repeat  them  for 
future  acquisitions,”  says 
Shelman,  CIO  at  Northrop. 
“It  is  essential  for  the  com¬ 
pany  to  look  and  act  like  one 
company,  have  efficient  and 
secure  access  to  computing 
resources  from  anywhere,  one 
standard  network  protocol, 
calendar  and  desktop  image 
and  one  way  to  collaborate.” 

During  the  Litton  acquisi¬ 
tion,  Shelman  had  more  than 


that  hanging  over  his  head. 
Shareholders  were  promised 
a  high  level  of  savings,  partic¬ 
ularly  from  IT.  But  his  group 
did  better  than  expected,  de¬ 
livering  $58  million  in  annual 
IT  savings,  expected  to  grow 
to  more  than  $600  million 
cumulatively  over  the  next  10 
years. 

But  even  though  the  $12 
million  project  came  in  on 
time  and  $4  million  under 
budget,  it  wasn’t  all  smooth 
sailing.  For  one  thing,  Litton 
was  a  big  pill  to  swallow. 

The  company  had  26  sepa¬ 
rate  IT  entities  supporting 
four  businesses  and  15,000 
users  at  64  sites. 


Northrop 
Grumman  Corp. 

www.northropgmmman.com 


■  Business:  A  $25  billion 
global  defense  and  IT  compa¬ 
ny  with  seven  business  sectors 
that  offer  products  and  ser¬ 
vices  in  systems  integration, 
defense  electronics,  IT,  ad¬ 
vanced  aircraft,  shipbuilding 
and  space  technology. 

■  Project  champion: 

Thomas  W.  Shelman 

■  IT  department:  23,000 

■  Project  payback:  IT  deliv¬ 
ered  annual  savings  of  $57 
million.  That  figure  is  expected 
to  grow  to  more  than  $600 
million  over  the  next  10  years. 


solidated  Litton’s  31  separate 
Internet  points  into  three 
and  two  Litton  data  centers 
into  the  primary  Northrop 
data  center. 

The  biggest  savings  came 
from  centralizing  corporate 
buying.  At  Litton,  each  busi¬ 
ness  unit  purchased  IT 
equipment  without  taking 
advantage  of  corporate  pur¬ 
chasing  agreements.  Shel¬ 
man’s  group  negotiated  new 
sourcing  contracts  based 
on  projected  volume  and 
Northrop’s  accepted  hard¬ 
ware  and  software  stan¬ 
dards.  This  not  only  helped 
leverage  Northrop’s  buying 
power  but  also  cemented 
which  products  the  techni¬ 
cal  staffs  would  support. 

Shelman  says  the  entire 
organization  now  uses  stan¬ 
dard  networks,  office  prod¬ 
ucts,  network  security  and 
routers,  as  well  as  the  IBM 
WebSphere  application  inte¬ 
gration  layer.  In  addition,  it 
manages  suppliers,  including 
SAP  as  a  predominant  sup¬ 
plier,  with  a  corporate-level 
buying  agreement. 

“We  told  people,  ‘Here  are 
the  things  you  get  a  choice 
on,  and  here’s  what  you  use 
that’s  standard,’  ”  Shelman 
says.  He  acknowledges  that 
he  met  with  a  tremendous 
amount  of  resistance.  “It’s 
not  easy  telling  someone  to 
rip  out  their  homegrown 
ERP  system  that  they’ve  used 
for  decades,  but  you  have  to 
empathize  and  show  people 
why  you’re  doing  it,”  he  says. 

Today,  the  cost  of  IT  as  a 
percentage  of  sales  is  2.5%. 
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It  is  essential  for  the  company  to  look  and  act  like  one  company,  have  efficient  and  secure  access  to  computing  resources  from  any¬ 
where,  one  standard  network  protocol,  calendar  and  desktop  image  and  one  way  to  collaborate. 

-  THOMAS  W.  SHELMAN,  CIO,  Northrop  Grumman  Corp. 


> 


That’s  down  from  3%  in 
2000,  before  the  Litton  ac¬ 
quisition. 

And  savings  aren’t  the  only 
outcome.  “The  acquisition  of 
a  company  like  Litton  brings 
more  than  just  projects  and 
revenue  but  relationships 
and  trust  that  will  continue 
to  result  in  an  increasing 
share  of  federal  IT  con¬ 
tracts,”  says  Winn  Hardin, 
an  analyst  in  the  aerospace 
and  defense  practice  at  Frost 
&  Sullivan.  “Northrop’s  ex¬ 
perience  in  integrating  large 
acquisitions  has  served  it 
well  in  this  case.” 

There  are  many  lessons 


that  Shelman’s  group  will 
apply  to  future  acquisitions. 
One  is  application  scaling. 
While  products  such  as  Ex¬ 
change  readily  scale  from 
40,000  to  120,000  users,  “the 
way  we  govern  the  infra¬ 
structure  had  to  change  sev¬ 
eral  times  based  on  the  mag¬ 
nitude  of  the  situation,  and 
that  was  not  always  a  linear 
process,”  Shelman  says. 

Second:  Win  over  the 
leaders.  “We  found  that  peo¬ 
ple  always  align  with  the 
management  directly  above 
them,”  Shelman  says.  He 
actually  hired  a  consultant 
to  help  with  what  he  thought 


was  an  employee-engage¬ 
ment  issue.  “But  once  we 
shored  up  management,  the 
problem  went  away,”  he  says. 

Third,  Shelman  says,  you 
can’t  communicate  too 
much.  “Just  because  you  say 
something,  doesn’t  mean 
they  processed  it  and  can  ar¬ 
ticulate  what  you  said.”  What 
might  seem  like  resistance 
could  simply  be  a  lack  of  true 
understanding,  he  says. 

O  44446 


Brandel  is  a  freelance  writer 
in  Grand  Rapids,  Mich. 
Contact  her  at  mary. 
brandel@comcast.net. 
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“People  thought  it  wasn’t  possible. 
But  the  team  did  it,”  says  Guardian 
Life’s  Shelley  McIntyre. 


BY  TODD  R.  WEISS 

WHEN  the  IT  de¬ 
partment  at 
Guardian  Life 
Insurance  Co. 
decided  to  in¬ 
stall  a  new  life  insurance  and 
annuity  administration  ap¬ 
plication  in  1999,  the  project 
seemed  to  have  all  the  ingre¬ 
dients  for  success. 

The  plan  was  to  replace  a 
30-year-old  legacy  batch  sys¬ 
tem  with  a  new  online  sys¬ 
tem  that  would  allow  users 
to  create,  view  and  modify 
database  tables  in  a  real-time 
environment.  The  applica¬ 
tion,  Transcend,  had  just 
been  sold  by  its  former  ven¬ 
dor,  TriMark  Technologies 
Inc.,  to  Pleasanton,  Calif.- 
based  PeopleSoft  Inc.,  and  a 
pleasing  new  product  road 
map  had  been  laid  out  that 
would  help  Guardian  add 
much-needed  capabilities. 

With  PeopleSoft’s  bold 
commitment  to  an  improved 
Transcend,  Guardian  decid¬ 
ed  to  move  ahead.  It  de¬ 
ployed  the  existing  applica¬ 
tion  temporarily,  modifying 
it  to  work  with  its  IT  sys¬ 
tems  until  it  was  time  to 
move  to  the  revamped  Peo¬ 
pleSoft  release,  says  Shelley 
McIntyre,  a  second  vice  pres¬ 
ident  of  business  services  at 
the  New  York-based  mutual 
life  insurance  company. 

But  then  things  came  un¬ 
raveled.  PeopleSoft  decided 
to  drop  its  plans  for  an  up- 


Guardian  Life 
Insurance  Co. 

www.glic.com 


■  Business:  The  fourth-largest 
mutual  life  insurance  company 
in  the  U.S.,  Guardian  has  more 
than  5,500  employees  and 
more  than  2,800  financial  rep¬ 
resentatives  in  94  agencies.  It 
supplies  employee  benefits  pro¬ 
grams  to  5  million  participants. 

■  Project  champion: 

Shelley  McIntyre 

■  IT  department:  398 

■  Project  payback:  New 

financial  services  products 
can  be  launched  in  90  days, 
and  back-office  costs  were 
reduced  by  40%. 

date,  and  Guardian  was  left 
with  a  shaky  IT  strategy.  The 
options  were  clear:  Either 
stick  with  Transcend,  which 
Guardian’s  IT  department 
was  already  updating,  or  start 
over  with  a  new  product. 

“That’s  when  we  realized 
this  wasn’t  a  temporary  solu¬ 
tion  anymore,  but  the  one 
that  we  wanted  and  the  one 
we  wanted  to  go  forward 
with,”  McIntyre  says. 

By  that  time,  even  another 
application  from  a  new  ven¬ 
dor  would  have  required 
customization  work.  So  it 
made  more  sense  to  stick 
with  what  they  had,  McIn¬ 
tyre  says.  “It  was  probably 
the  biggest  challenge  the 


team  had  ever  been  given,” 
she  says. 

In  just  19  weeks,  the  40- 
member  team  had  to  imple¬ 
ment  the  system,  create  the 
software  interfaces  to  make  it 
all  work  and  get  the  new  ap¬ 
plication  ready  for  the  com¬ 
pany’s  employees.  The  hard¬ 
ware  and  software  costs  to¬ 
taled  about  $2.2  million,  not 
including  staff  time,  McIn¬ 
tyre  says.  “Other  people  in 
the  company  named  the  team 
the  No-Way  Team,”  she  says. 
“People  thought  it  wasn’t 
possible.  But  the  team  did  it.” 

By  going  it  alone  with  a 
product  that  no  longer  had 
vendor  support,  Guardian’s 
IT  staff  had  to  build  its  own 


expertise  —  a  strategy  that 
had  mixed  potential.  “You’ve 
got  control  over  your  own 
destiny  for  sure,”  McIntyre 
says.  “I  don’t  think  anyone 
outside  the  company  thought 
we  could  do  it.  But  the  busi¬ 
ness  team  and  the  IT  team 
thought  we  had  to  do  it.” 

Guardian  installed  the  first 
version  of  the  system  in  1999. 
Since  then,  the  IT  team  has 
phased  in  new  features  and 
capabilities,  including  the 
ability  to  conduct  Web  trans¬ 
actions.  Today,  about  57  bro¬ 
kerage  firms  use  the  updated 
application  to  sell  their  fi¬ 
nancial  products.  “It’s  one 
standard  interface  that  all 
the  outside  broker  dealers 
can  use,”  McIntyre  says. 

One  huge  benefit  is  that 
the  new  application  allows 
Guardian  to  launch  financial 
services  products  in  90  days, 
rather  than  the  six  to  nine 
months  it  took  with  the  origi¬ 
nal  software,  she  says.  “We 
made  a  huge  impact  on  the 
business,  that’s  for  sure,” 
McIntyre  says.  The  move  has 
also  saved  40%  on  back-office 
costs.  “It  was  hugely  success¬ 
ful,”  she  says.  O  44357 


GOES  IT  ALONE  WITH 

Insurance  Processing  System 
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DHL 


REAPS  MASSIVE  SAVINGS  IN 


Data  Center 
Consolidation 


DHL 

International  Ltd. 


www.dhl.com 


■  Business:  An  express  and 
logistics  company,  DHL  had 
2002  sales  of  $21.6  billion. 

Its  express  service  reaches 
120,000  destinations  in  about 
230  countries  and  territories. 


■  Project  champions: 

Steve  J.  Bandrowczak  and 
Darrel  Waite 


IT  department:  4,000 


■  Project  payback:  The 

project,  which  cost  $75.86  mil¬ 
lion,  is  saving  the  company 
about  $24  million  a  year.  That 
annual  savings  figure  is  ex¬ 
pected  to  reach  more  than 
$50  million  later  this  year. 


BY  LINDA  ROSENCRANCE 


When  Steve  J. 

Bandrowczak 
and  Darrel 
Waite  joined 
DHL  Interna¬ 
tional  Ltd.  in  March  2002, 
the  two  men  embarked  on  a 
mission  to  consolidate  the 
freight  company’s  eight  data 
centers  sprinkled  through¬ 
out  North  America  into  one 
state-of-the-art  facility  in 
Scottsdale,  Ariz. 

“DHL  wanted  to  create  a 
seamless  single  offering  to 
our  customers,  like  a  single 
invoice  or  a  single  Web  in¬ 
terface,”  says  Bandrowczak, 
DHL’s  CIO.  “In  order  to  en¬ 
able  that  global  logistics 
business  vision,  we  had  to 
consolidate  our  IT  infra¬ 
structure,  which  included 
the  data  center,  our  network 
backbone  and  our  key  global 
applications.” 

The  project,  also  helmed 
by  Waite,  who  is  vice  presi¬ 
dent  of  operations,  was  de¬ 
signed  to  do  just  that.  The 
goal  was  to  bring  together 
into  one  facility  DHL’s  glob¬ 
al  and  regional  IT  functions 
within  North  America,  in¬ 
cluding  people,  computers 
and  business  systems. 

And  they  did  it,  on  time 
and  under  budget.  The  total 
cost  of  DHL’s  Americas  In¬ 
formation  Service  consolida¬ 


tion  program,  completed  in 
December  2002,  was  $75.86 
million.  The  project’s  budget 
was  $76.15  million. 

The  consolidation  is  cur¬ 
rently  saving  DHL  about 
$24  million  a  year,  and  when 
the  company  consolidates 
the  IT  infrastructure  of  its 
latest  acquisition,  Airborne 
Express,  into  the  Scottsdale 
facility  in  the  second  quarter 
of  this  year,  the  savings  will 
be  more  than  $50  million  an¬ 
nually,  Bandrowczak  says. 

The  information  services 
center  in  Scottsdale  com¬ 
pletes  a  loop  of  centers  cir¬ 
cling  the  globe  that  provide 
round-the-clock  manage¬ 
ment  of  the  company’s  IT 
services. 

The  other  two  centers  are 
in  London  and  Kuala  Lumpur, 
Malaysia.  Each  center  man¬ 
ages  DHL’s  computing  and 
telecommunications  network, 
DHLNet,  for  a  nine-hour 
shift  —  eight  hours 
of  support  plus  a 
one-hour  overlap  to 
transfer  control 
from  one  center  to 
the  next.  The  cen¬ 
ters  provide  support 
to  DHL’s  60,000  em¬ 
ployees  and  more 
than  1  million  cus¬ 
tomers  worldwide. 

Part  of  the  project 


Steve  J.  Bandrow¬ 
czak,  CIO  at  DHL 
International  Ltd. 


ment  in  Houston  we  had  to 
move,”  Waite  says.  “And  we 
had  to  integrate  the  main¬ 
frame  skills  into  our  techni¬ 
cal  skills.  Now  the  main¬ 
frame  has  become  an  equal 
part  of  the  new  Scottsdale 
facility  and  the  new  global 
environment  for  DHL.” 

Another  challenge  was 
how  to  capture  and  transfer 
some  longtime  employees’ 
knowledge  about  the  compa¬ 
ny’s  core  applications,  par¬ 
ticularly  when  those  em¬ 
ployees  had  decided  not  to 
move  to  Scottsdale.  One  way 
was  to  use  a  “shadow  ap¬ 
proach,”  Waite  says. 

“We  brought  on  new  em¬ 
ployees,  and  they  shadowed 
the  legacy  employee.  They 
got  up  to  speed,  and  there 
was  knowledge  transfer,” 
Bandrowczak  says. 

The  move  to  Scottsdale 
benefits  both  DHL  and  its 
customers,  says  Satish  Jindel, 
an  analyst  at  SJ  Con¬ 
sulting  Group  Inc. 
in  Sewickley,  Pa. 

“By  bringing  all  the 
IT  needs  of  DHL  to¬ 
gether,  the  company 
has  a  better  under¬ 
standing  of  what 
customers  are  do¬ 
ing,  and  it  will  have 
positive  implica¬ 
tions  from  a  cost 


included  migrating  or  con¬ 
solidating  103  Unix,  Wintel 
and  AS/400  servers  and 
18TB  of  storage  from  the 
Redwood  Shores,  Calif.,  data 
center  to  the  Scottsdale  fa¬ 
cility;  migrating  Sun  Solaris 
systems  to  Scottsdale  from 
Tempe,  Ariz.,  and  in  most 
cases,  converting  them  to 
DHL’s  global  open-systems 
standard  HP-UX  lli;  and 
moving  the  mainframe,  tape 
and  print  operations  units 
from  Houston  to  Scottsdale. 

“We  were  predominantly 
open  systems,  but  we  had  a 
large  mainframe  environ- 


point  of  view  and  from  a  cus¬ 
tomer  perspective,”  Jindel 
says.  “In  the  long  run,  every¬ 
one  will  come  out  ahead.” 

Donald  Broughton,  a 
transportation  analyst  at 
A.G.  Edwards  &  Sons  Inc.  in 
St.  Louis,  is  impressed  with 
DHL’s  ability  to  get  the  proj¬ 
ect  done  fast  and  inexpen¬ 
sively.  “That  they  accom¬ 
plished  this  on  time  and  un¬ 
der  budget  is  heroic  given 
the  operational  complexity 
of  the  business  that  this  in¬ 
formation  system  has  been 
charged  with  managing,” 
Broughton  says.  ©  44443 
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BY  MATT  HAMBLEN 

onsidered  one 
of  the  largest 
grid  computing 
projects  in  the 
world,  J.P.  Mor¬ 
gan  Chase  In¬ 
vestment  Bank’s  pioneering 
effort  to  combine  seven  sep¬ 
arate  financial  risk  manage¬ 
ment  systems  to  share  com¬ 
puting  power  is  on  target  to 
lower  costs  while  increasing 
flexibility  and  service  to  in¬ 
ternal  customers. 

The  idea  was  hatched  back 
in  2001  to  address  cost  and 
staffing  inefficiencies  in  the 
seven  systems,  which  were 
designed  to  help  traders  as¬ 
sess  and  manage  financial 
exposures  such  as  interest 
rates,  equities,  foreign  ex¬ 
change  and  credit  derivatives. 

Known  as  the  Compute 
BackBone,  or  CBB,  the  new 
system  will  eventually  com¬ 
bine  the  power  of  about 
2,000  CPUs  that  run  on  50 
midsize  servers.  Early  this 
year,  more  than  700  CPUs 
were  on  the  Compute  Back- 
Bone  in  stripped-down  blade 
servers,  and  150  CPUs  are 
being  added  each  month. 

According  to  CIO  Michael 
J.  Ashworth,  the  New  York- 
based  investment  bank  spent 
$4.5  million  upfront  on  the 
project,  working  with  Plat¬ 
form  Computing  Inc.  in 


J.P  Morgan  Chase 
Investment  Bank 

www.jpmorgan.com 


■  Business:  Provides  invest¬ 
ment  banking  and  commercial 
banking  products  and  ser¬ 
vices.  Also  advises  on  corpo¬ 
rate  strategy  and  structure,  the 
raising  of  capital  in  equity  and 
debt  markets,  and  risk  man¬ 
agement. 

■  Project  champions: 

Michael  J.  Ashworth  and 
Steven  Neiman 

■  IT  department:  11,000 

■  Project  payback:  Lower 
costs  for  hardware,  reduced 
development  and  operational 
costs  and  more  effective  sys¬ 
tems  management  resulted  in 
$1  million  savings  in  2003.  An¬ 
other  $5  million  in  savings  are 
expected  this  year. 


Markham,  Ontario,  to  devel¬ 
op  middleware  that  shares 
caching  resources  and  pro¬ 
vides  management,  queuing 
and  scheduling. 

“We  are  looking  for  infi¬ 
nite  capacity  in  our  compute 
[system],  and  that’s  a  bit  of  a 
challenge.  But  this  gives  us 
more  progress  toward  that 
goal.  It’s  something  which  is 
difficult  to  put  a  price  on,” 
Ashworth  says. 

Still,  initial  accounting 


IPMoman 

HARNESSES  POWER  WITH 

Grid  Computing  System 


shows  that  the  Compute 
BackBone  saved  the  bank 
$1  million  in  2003,  and  an¬ 
other  $5  million  in  savings 
are  expected  this  year.  The 
savings  come  from  lower 
costs  for  hardware,  reduced 
development  and  opera¬ 
tional  costs,  and  more  effec¬ 
tive  systems  management, 
says  Adrian  Kunzle,  co-head 
of  architecture  for  invest¬ 
ment  bank  technology. 

The  Compute  BackBone  is 
built  on  new  blade  hardware 
devices,  which  are  “heavily 
cut-down  machines  with  four 
processors  and  a  bunch  of 
memory,”  Kunzle  says.  Tak¬ 
ing  into  account  all  areas  of 
savings,  the  CBB  has  “taken 
easily  20%  out  of  the  com¬ 
pute-cycle  costs,”  he  adds. 

Steven  Neiman,  senior  in¬ 
formation  architect  and  one 
of  the  Compute  BackBone’s 
creators,  says  the  grid  ap¬ 
proach  allows  the  invest¬ 
ment  bank  to  reduce  opera¬ 
tional  risk,  for  instance  when 
an  isolated  server  fails.  “You 
have  an  ability  to  respond 
much  more  flexibly,”  he  says. 

In  another  show  of  flexibil¬ 
ity,  a  new  credit-trading  ap¬ 
plication  was  built  into  the 
system  in  just  10  weeks  in¬ 
stead  of  the  five  months  it 
would  have  taken  before  the 
Compute  BackBone,  Ash¬ 
worth  says.  And  because  the 
CBB  provides  a  scalable  in¬ 
frastructure,  the  investment 
bank  was  immediately  able  to 
handle  new  business  volume. 

According  to  Ahmar  Ab¬ 
bas,  an  analyst  at  Grid  Tech¬ 
nology  Partners  in  South 
Hadley,  Mass.,  J.P.  Morgan’s 
Compute  BackBone  is  prob¬ 
ably  the  biggest  grid  com¬ 
puting  project  in  the  world, 
compared  with  the  six  oth¬ 
ers  that  have  been  publi¬ 
cized  and  are  currently  un¬ 
der  way.  Such  projects  can 
lower  costs  partly  because 
they  use  inexpensive  servers 
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HWe  are  looking  for 

infinite  capacity  in  our 
compute  [system], 
and  that’s  a  bit  of 
a  challenge.  But  this  gives  us 
more  progress  toward  that  goal. 
It's  something  which  is  difficult 
to  put  a  price  on. 

-  MICHAEL  J.  ASHWORTH, 

CIO,  J.P.  Morgan  Chase 
Investment  Bank 


that  can  be  added  one  at  a 
time,  he  says. 

“The  money  you  can  save 
is  huge,”  Abbas  says. 

But  perhaps  more  than  the 
technology  itself,  J.P.  Mor¬ 
gan’s  IT  managers’  enlight¬ 
ened  thinking  in  creating  the 
Compute  BackBone  has 
earned  Abbas’  praise. 

“It’s  a  very  impressive 
project  because  of  the  huge 
mind-shift  away  from  what 
they  were  doing  before,”  he 
says.  “You  are  pooling  all 
kinds  of  IT  resources  from 
all  areas  of  the  company,  and 


that’s  one  huge  leap.” 

Making  the  organizational 
shift  meant  overcoming  skep¬ 
ticism  from  internal  users 
who  had  run  applications  on 
their  own  dedicated  servers, 
Ashworth  says.  “This  was  a 
proposed  factory  for  high- 
end  computing,  and  you 
were  taking  away  the  per¬ 
ceived  flexibility  that  the 
business  units  think  they 
have,”  he  explains.  “It  was  a 
lot  of  people  to  convince.” 

Neiman  credits  the  cre¬ 
ation  of  the  CBB  to  bright 
minds  at  the  investment 


bank  with  roots  in  the  acade¬ 
mic  world  who  were  encour¬ 
aged  to  “defend  their  ideas 
in  open  forums.”  This  meant 
that  “anybody  anywhere  in 
the  bank  could  come  up  and 
say,  ‘I  don’t  think  you’ve 
thought  this  through.’  It  was 
a  self-correcting  mecha¬ 
nism,”  he  says. 

The  team  of  innovators 
“wasn’t  sitting  here  saying, 
‘We  want  to  build  grid  com¬ 
puting,’  ”  Neiman  adds.  In¬ 
stead,  he  says,  “we  wanted  to 
solve  the  problem  we  were 
handed.”  ©  44461 
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REVENUE  WITH 


agency  that  manages  a  major 
portion  of  the  state’s  electric 
power  grid.  In  some  in¬ 
stances,  Calpine  uses  spread- 
spectrum  radio  technology  to 
“hop”  to  a  local  data  site,  says 
Darrell  Scruggs,  Calpine’s 
manager  of  market  opera¬ 
tions  and  engineering. 


RealTime  Market  Interface 


BY  THOMAS  HOFFMAN 

in  late  2001,  San  Jose-based 
energy  producer  Calpine 
Corp.  saw  an  opportunity  to 
create  a  set  of  real-time  in¬ 
terfaces  to  several  energy 
markets,  with  the  twin  goals 
of  improving  operational  ef¬ 
ficiency  and  gaining  a  com¬ 
petitive  advantage. 

The  company’s  $136,000 
IT  investment  has  helped 
generate  or  protect  millions 
of  dollars  in  revenue,  prov¬ 
ing  that  Calpine  succeeded 
on  both  counts. 

The  first  interface, 
launched  in  January  2002, 
was  applied  to  load  teleme¬ 


Calpine  Corp. 

www.calpine.com 


■  Business:  This  energy  pro¬ 
ducer  has  88  facilities  with  a 
total  capacity  of  about  22,000 
megawatts.  Another  10  facili¬ 
ties  under  construction  will  add 
7,000  megawatts  to  the  total. 

■  Project  champion: 

Dennis  Fishback 


■  IT  department:  209 

■  Project  payback: 

A  $136,000  IT  investment  has 
generated  millions  of  dollars  in 
new  and  retained  revenue. 


try  for  Calpine’s  industrial 
customers  in  Texas.  Previ¬ 
ously,  gathering  this  data  was 
cost-prohibitive.  Leased-line 
modems  and  other  equip¬ 
ment  could  run  as  high  as 
$12,000  per  customer  site 
and  take  60  to  90  days  to  de¬ 
ploy,  says  Barbara  Kindel, 
Calpine’s  director  of  opera¬ 
tions  engineering  services. 

So  the  energy  firm  devel¬ 
oped  an  approach  that  allows 
it  to  view  customer  load  data 
and  dynamically  schedule 
those  loads  though  a  Cellular 
Digital  Packet  Data  backbone 
with  the  Electric  Reliability 
Council  of  Texas  Inc.,  the 


Calpine  was  able  to  reduce 
its  implementation  costs  per 
interface  to  $2,500  and  slash 
deployment  time  to  one  or 
two  days,  says  Kindel. 

The  top-line  impact  was 
even  more  impressive.  The 
real-time  interfaces  helped 
Calpine  capture  several  mil¬ 
lion  dollars  in  new  2002  rev¬ 
enue  from  industrial  cus¬ 
tomers  in  Texas  and  freed  up 
electricity  that  could  be  sold 
to  others,  says  Dennis  Fish- 
back,  Calpine’s  CIO. 

According  to  Zarko  Sumic, 
an  analyst  at  Meta  Group  Inc. 
in  Stamford,  Conn.,  Calpine’s 
efforts  reflect  an  increased 
need  in  the  U.S.  energy  in¬ 
dustry  for  wholesale  market 
transparency.  The  ability  to 
effectively  exchange  data 


Visa 

RESOLVES  CHARGE 
DISPUTES  WITH 

Wivbased  System 


BY  LUCAS  MEARIAN 

when  an  inaccurate  charge 
is  listed  on  a  credit  card  bill, 
it’s  not  just  the  customer  who 
sees  red.  Settling  a  disputed 
charge  is  one  of  the  costliest 
components  of  a  credit  card 
company’s  business. 


At  Visa  U.S.A.  Inc.  in  Fos¬ 
ter  City,  Calif.,  a  new  back- 
office  infrastructure  will  re¬ 
duce  the  time  and  labor  re¬ 
quired  to  handle  a  customer- 
disputed  charge  by  creating 
an  online,  automated  proc¬ 
ess.  The  company  expects 


that  the  system  will  help  it 
save  as  much  as  $1  billion 
over  the  next  five  years. 

“We’ve  implemented  the 
first  two  releases  of  the  Re¬ 
solve  Online  infrastructure, 
and  already  we’ve  achieved 
savings  in  excess  of 
$200  million  sys¬ 
temwide,”  says 
Scott  Thompson, 

Visa’s  CIO  and 
project  leader. 

The  Visa  Resolve 
Online  project,  now 
in  its  final  stage,  is  a 
Web-enabled  appli¬ 
cation  used  to  facil¬ 
itate  changes  to  the  re-engi- 
neered  disputes  process. 

The  greatest  benefit  of  the 
project  has  been  to  simplify 
the  current  process  by  elimi¬ 


nating  most  paper  documen¬ 
tation,  reducing  the  time  re¬ 
quired  to  resolve  disputes 
and  eliminating  unnecessary 
steps  in  the  process,  Thomp¬ 
son  says. 

This  Web-based  tool  gives 
member  banks,  mer¬ 
chants  and  cus¬ 
tomer  support  rep¬ 
resentatives  at  mem¬ 
ber  banks  real-time 
access  to  transaction 
data  through  secure 
browser  screens  or 
Visa’s  private  IP 
network,  known  as 
Direct  Exchange. 

“It  evolves  our  back-office 
infrastructure  into  a  real¬ 
time,  cardholder-centric  sys¬ 
tem,”  Thompson  says. 

Avivah  Litan,  an  analyst  at 


Scott  Thompson,  CIO 
at  Visa  U.S.A. 
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terrupted  under  certain  con¬ 
ditions,  under  what’s  known 
as  the  Loads  Acting  as  a  Re¬ 
source  (LAAR)  program.  Be¬ 
ginning  last  May,  Calpine 
created  a  set  of  real-time 
interfaces  to  provide  these 
services  to  large  customers 
through  their  local  retail 
electricity  providers. 

Calpine  was  able  to  deliv¬ 
er  these  services  by  leverag¬ 
ing  its  existing  energy  man¬ 
agement  system,  wireless 
communications  and  field 
data  acquisition  devices  and 
interfacing  to  the  revenue 
meters  and  the  load’s  Distri¬ 
bution  Control  System. 

The  payoff?  Implementa¬ 
tion  of  the  LAAR  service  for 
just  one  customer  generated 
a  37-fold  return  on  invest¬ 
ment  in  revenue  retention 
alone,  says  Fishback. 

“You  don’t  have  to  spend 
hundreds  of  thousands  of  dol¬ 
lars  to  create  a  competitive 
advantage,”  says  Kindel.  “You 
can  do  it  by  thinking  creative¬ 
ly  and  implementing  innova¬ 
tive  solutions.”  ©  44358 


among  market  participants, 
such  as  Calpine,  and  market 
operators  can  help  partici¬ 
pants  reduce  scheduling  and 
planning  time  from  days  or 
hours  to  minutes,  says  Sum- 
ic.  It  also  allows  the  compa¬ 
nies  to  optimize  dispatches 


to  increase  the  payback  on 
energy  generation,  he  adds. 

The  project  presented 
Calpine  with  relatively  mi¬ 
nor  challenges.  For  the  load 
telemetry  interface  effort, 
the  biggest  challenge  was 
not  knowing  until  Jan.  1, 


2002,  just  how  many  cus¬ 
tomer  sites  would  need  in¬ 
terfaces,  says  Kindel. 

Meanwhile,  big  electric 
customers  in  Texas  were  re¬ 
cently  given  the  opportunity 
to  elect  to  be  paid  to  have 
their  electricity  service  in- 


Gartner  Inc.  in  Stamford, 
Conn.,  says  handling  con¬ 
sumer  chargebacks  can  cost 
merchants  as  much  as  $50 
each.  Card-issuing  banks  and 
acquiring  banks  (the  banks 
that  back  merchants)  lose  as 
much  as  $25  each.  Litan  says 
an  online  dispute  resolution 
system  is  “one  of  the  most 
time-saving,  productive  fea¬ 
tures”  that  a  credit  card 
company  can  implement. 

“With  a  chargeback,  [cred¬ 
it  card  companies]  have  to 
produce  documentation,  get 
back  to  the  acquiring  banks, 
and  the  acquirer  has  to  get 
back  to  the  merchant,”  Litan 
says.  “Now  [Visa]  just  puts 
everything  in  the  system  and 
everyone  sees  it.” 

Visa’s  original  dispute  res- 


Visa  U.S.A.  Inc. 

www.visa.com 


■  Business:  U.S.  consumers 
hold  an  estimated  345  million 
Visa-brand  credit  and  debit 
cards. 


■  Project  champion: 

Scott  Thompson 

■  IT  department:  2,600 

■  Project  payback:  A  back- 
office  infrastructure  cuts  the 
time  and  labor  required  to  han¬ 
dle  disputed  charges,  saving 
Visa  an  anticipated  $1  billion 
over  the  next  five  years. 

olution  process  relied  heavi¬ 
ly  on  paper  and  the  postal 
system  to  communicate  with 
cardholders.  In  1999,  Visa 


formed  a  working  group  with 
card  issuers  and  some  mer¬ 
chants  to  re-engineer  the  ex¬ 
ception  rules,  processes  and 
systems.  The  Visa  Resolve 
Online  project  began  in  No¬ 
vember  2001,  and  the  first  ver¬ 
sion  went  online  in  June  2002. 

Subsequent  releases  of  Visa 
Resolve  included  the  ability  to 
create  and  transmit  charge- 
backs,  attach  images  and  sup¬ 
porting  documentation  and 
transmit  large  volumes  of 
images  relevant  to  disputes. 

The  fourth  release  of  the 
online  product  is  expected 
in  October  and  will  provide 
access  to  Visa’s  copy  request 
service,  fraud  reporting  and 
a  set  of  revised  dispute  rules. 
The  Visa  Resolve  project  has 
reduced  customer  service 


training  time,  standardized 
information  exchanged  be¬ 
tween  Visa  and  its  bank  and 
merchant  customers,  im¬ 
proved  quality  control  with 
regard  to  internal  processes 
and  cut  the  time  it  takes  to 
resolve  disputes. 

What  Visa  didn’t  figure 
into  the  projected  payback 
was  increased  customer  sat¬ 
isfaction,  which  Thompson 
says  was  cited  by  member 
banks  as  the  biggest  benefit. 

“It  has  been  projected  that 
upon  full  implementation  of 
Visa  Resolve  Online  in  Octo¬ 
ber  2004,  disputes  will  be  at 
least  20%  less  expensive  to 
process,”  Thompson  says. 
“Some  members  believe  this 
number  to  be  closer  to  50%.” 
O  44631 
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CHECKS  OUT  BENEFITS  OF 

Centralized  Call-Accounting 


BY  GARY  H.  ANTHES 

T’S  AN  UNPLEASANT  but 
all-too-common  experi¬ 
ence:  You  are  checking 
out  of  a  hotel  and  are 
outraged  to  find  your 
bill  littered  with  long¬ 
distance  telephone  charges, 
at  $10  to  $20  a  pop.  And  there 
are  about  a  dozen  $1  charges 
for  local  calls  —  one  for 
every  time  you  connected 
to  the  Internet.  You  stay  at 
hotels  in  this  chain  often, 
you  tell  the  desk  clerk,  and 
they  ought  to  treat  you  bet¬ 
ter.  He  agrees  to  remove  the 
charges,  but  he  makes  you 
wait  while  he  fixes  your  bill. 

Thanks  to  some  innova¬ 
tive  work  by  project  leader 
Mark  F.  Hedley,  that  scenario 
doesn’t  play  out  anymore  at 


Wyndham 
International  Inc. 

www.wyndham.com 


■  Business:  Based  in  Dallas, 
Wyndham  International  owns, 
leases,  manages  and  franchis¬ 
es  hotels  and  resorts  in  the 
U.S.,  Canada,  Mexico,  the 
Caribbean  and  Europe. 

■  Project  champion: 

Mark  F.  Hedley 

■  IT  department:  67 

■  Project  payback:  Guest 
call-accounting  system  elimi¬ 
nated  more  than  100  local  sys¬ 
tems  and  is  expected  to  pro¬ 
duce  a  269%  return  on  invest¬ 
ment  over  five  years. 


Wyndham  hotels.  Hedley,  a 
senior  vice  president  and 
chief  technology  officer  at 
Wyndham  International  Inc. 
in  Dallas,  is  the  mastermind 
behind  a  chainwide,  central¬ 
ized  call-accounting  system 
that  has  reduced  operating 
costs  at  the  company’s  hotels 
while  removing  a  key  source 
of  customer  dissatisfaction. 

On  a  central  server  in  Dal¬ 
las  that  interfaces  to  each  ho¬ 
tel,  the  new  system  keeps 
track  of  telephone  rates  that 
can  vary  by  hotel,  corporate 
customer,  guest  group,  date 
or  even  by  individual  guest. 

A  Wyndham  salesperson 
can,  for  example,  promise  a 
convention  group  a  block  of 
rooms  with  a  special  low 
phone  rate  for  the  duration 
of  their  stay  and  be  confi¬ 
dent  that  the  group  will  get 
that  rate  —  automatically 
and  transparently. 

The  system  also  recog¬ 
nizes  Wyndham’s  ByRequest 
premier  members  and  en¬ 
sures  that  they  get  free  long¬ 
distance  and  local  telephone 
service  and  free  high-speed 
Internet  access.  It  also  sup¬ 
ports  administrative  func¬ 
tions  such  as  call-pattern 
analysis  and  compliance  with 
national  carrier  contracts. 

The  call-accounting  system 
eliminated  more  than  100  lo¬ 
cal  systems  and  is  expected 
to  produce  a  269%  return  on 
investment  over  five  years, 
not  counting  additional  rev¬ 
enue  it  might  bring  from 


happy  guests,  says  Hedley. 
“This  is  the  first  time  in  the 
industry  this  has  been  done, 
first  and  foremost,  on  a  cen¬ 
tralized  basis,”  he  says.  “It 
used  to  be  a  tremendous 
overhead  for  a  hotel  to  keep 
the  rate  tables  up  to  date,  to 
keep  the  equipment  config¬ 
ured  properly  and  so  on.” 

“It’s  pretty  slick,”  says 
W.  Douglas  Lewis,  a  senior 
partner  at  Edge  Consulting 
Group  LLC  in  Atlanta  and 
former  CIO  at  InterConti¬ 
nental  Hotels  Group.  “It  al¬ 
lows  your  frequent  stayers 
to  automatically  get  the 
charges  not  put  on  the  bill.  It 
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HThis  is  the  first  time 
in  the  industry  this 
has  been  done,  first 
and  foremost,  on  a 
centralized  basis.  It  used  to  be 
a  tremendous  overhead  for  a  hotel 
to  keep  the  rate  tables  up  to  date, 
to  keep  the  equipment  configured 
properly  and  so  on. 


-  MARK  F.  HEDLEY, 

senior  vice  president  and  CTO, 
Wyndham  International  Inc. 


removes  one  of  the  largest 
dissatisfiers  of  hotel  guests.” 

Lewis  also  praises  the  sys¬ 
tem’s  architecture.  “They 
have  managed  to  link  their 
ByRequest  database  in  with 
their  call-accounting  system 
and  the  PBXs  in  the  hotels. 
That’s  technically  very  inter¬ 
esting,”  he  says. 

Some  of  the  project’s  in¬ 
novations  were  more  prosa¬ 
ic.  It  was  necessary  to  install 
a  brick-size  data-collection 
and  network-interface  de¬ 
vice  at  every  hotel,  but  Hed- 
ley  didn’t  want  to  bear  the 
cost  of  sending  an  IT  person 
to  each  site  to  do  that.  “We 


created  a  very  extensive  set 
of  instructions,  a  book,  on 
how  to  install  the  device,”  he 
says.  “We  had  to  make  it  so 
anyone  could  install  it,  but 
here  we  were  asking  them  to 
touch  the  parts  of  a  phone 
system  that  you  generally 
wouldn’t  touch.” 

Senior  project  manager 
Doug  Oppenheimer  wrote 
the  instructions  and  even 
photographed  a  Phillips 
screwdriver  to  show  the  in¬ 
stallers  what  one  looks  like. 
“I  came  from  a  hotel  before 
getting  into  IT,”  says  Oppen¬ 
heimer.  “I  said,  ‘How  would 
someone  who  never  saw  a 


computer  deploy  this  device 
properly  the  first  time?’  ” 

Oppenheimer  also  set  up  a 
Web  site  with  frequently 
asked  questions  about  the 
new  system,  created  a  train¬ 
ing  course  that  could  be 
downloaded  or  obtained  on 
a  CD,  and  beta-tested  every¬ 
thing  at  two  hotels. 

“The  whole  implementa¬ 
tion  of  that  device  went 
seamlessly,  vs.  what  a  disas¬ 
ter  it  could  have  been  and 
how  much  time  and  cost  it 
could  have  added,”  Hedley 
says.  “We  did  the  entire  sys¬ 
tem  rollout  in  90  days.” 
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BEST  IN  CLASS 


Filing  Portal 


BY  STEVE  ULFELDER 

N  late  1997,  Ohio’s  state 
legislature  passed  a  bill 
ordering  government 
agencies  to  streamline 
convoluted  processes  in 
the  areas  of  workers’  com¬ 
pensation,  employer  tax 
withholding  and  tax  filing. 

The  legislators  were,  ad¬ 
mirably,  responding 
to  businesses’  con¬ 
cerns  about  the 
amount  of  time  re¬ 
quired  for  these  ad¬ 
ministrative  tasks. 

But  they  didn’t  ad¬ 
dress  details  such  as 
funding  and  project 
ownership,  and  so 
Ohio  House  Bill  202 
made  little  headway 
for  two  years. 

When  Gregory  S.  Jackson 
signed  on  as  Ohio’s  CIO  in 
2000,  he  made  meeting  the 
demands  of  the  unfunded 
mandate  an  immediate  pri¬ 
ority  because,  Jackson  says, 


he  agreed  with  the  legisla¬ 
ture  that  a  more  user-friend¬ 
ly  system  was  important  for 
the  state’s  employers.  The 
resulting  portal,  dubbed 
the  Ohio  Business  Gateway, 
has  exceeded  demands  at 
every  turn.  Small  and  medi¬ 
um-size  businesses  use  the 
portal’s  single  interface  to 
transact  with  the 
state  taxation, 
workers’  compensa¬ 
tion,  family  services 
and  administrative 
services  agencies; 
the  time  they  spend 
on  such  tasks  has 
dropped  36%,  state 
studies  show. 

Jackson  concedes 
that  gaining  the 
agencies’  initial  cooperation 
was  the  toughest  part  of  the 
project.  Gartner  Inc.  analyst 
John  Kost  isn’t  surprised. 
“The  main  currency  of  gov¬ 
ernment  isn’t  income  or 
wealth.  It’s  power,”  he  says. 


Gregory  S.  Jackson, 
CIO  of  the  state  gov¬ 
ernment  of  Ohio 


BY  MARC  L.  SONGINI 

hen  network 
hardware  mak¬ 
er  Nortel  Net¬ 
works  Ltd.  be¬ 
gan  a  major 
CRM  initiative  in  2000,  the 
goal  was  to  connect  all  cus¬ 
tomer-facing  processes  and, 
in  so  doing,  slash  support 
costs  and  boost  sales. 


Because  Nortel  had  many 
individual  business  units 
that  catered  to  different  mar¬ 
ket  segments,  there  were 
more  than  25  sales  and  130 
customer  support  systems  in 
place,  some  overlapping.  The 
system  was  clearly  ineffi¬ 
cient:  For  example,  it  took  50 
seconds  for  customer  service 
agents  to  answer  calls  at  peak 


Nortel 

UNIFIES  CUSTOMER  EXPERIENCE  WITH 

Integrated  CRM  System 


times,  and  the  abandoned 
call  rate  was  nearing  7%. 

“Our  customers  were 
quickly  becoming  frustrat¬ 
ed,”  says  project  leader  and 
CIO  Albert  Hitchcock,  who 
is  based  in  Research  Trian¬ 
gle  Park,  N.C. 

The  project’s  main  goal 
was  to  have  one  integrated 
system  that  could  handle  the 
entire  customer  experience, 
from  point  of  sale  to  product 
installation  and  support. 

To  do  this,  Nortel  execu¬ 
tives  decided  to  consolidate 
the  company’s  various  legacy 
CRM  systems  into  one  built 
around  Amdocs  Ltd.’s  Clari¬ 
fy  software.  This  required  a 
phased  rollout,  prioritized 
based  on  business  needs 
and  evaluated  by  a  mixed 
business  and  IT  review 
board.  Each  individual  up¬ 
grade  had  to  be  financially 
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“So  creating  a  multidepart¬ 
ment  portal  is  viewed  by 
those  agencies  as  diminish¬ 
ing  their  power.  That’s  going 
to  affect  their  behavior.” 

In  2000,  Jackson  says,  he 
told  a  group  of  outside  con¬ 
sultants  who  were  evaluat¬ 
ing  state  processes  that  “we 
were  having  trouble  getting 
traction”  with  the  project. 
Those  consultants  recom¬ 
mended  that  a  director  from 
an  affected  agency  be  per¬ 
suaded  to  own  the  project. 
“That  way,  it  would  clearly 
be  an  agency  priority,”  Jack- 
son  says,  “not  just  another  IT 
project  within  each  agency.” 

At  that  point,  Jackson  got 
some  help  when  Ohio  Gov. 
Bob  Taft  became  involved 
and  requested  that  the  Ohio 
Department  of  Taxation  di¬ 
rector  take  on  sponsorship. 
“That  was  an  amazing  turn¬ 
ing  point,”  Jackson  says.  Not 
only  was  the  project  kick- 
started,  but  the  ensuing  dis- 


State  of  Ohio 

www.state.oh.us 


■  Organization:  The  34th 
largest  state  by  land  area  in 
the  U.S.,  Ohio  covers  116,103 
square  miles.  Its  state  capital 
and  largest  city  is  Columbus. 

■  Project  champion: 

Gregory  S.  Jackson 

■  IT  department:  2,000 

■  Project  payback:  An  in¬ 
vestment  of  $1.25  million  for 
initial  development  has  re¬ 
turned  36%  time  savings  for 
Ohio  businesses  and  a  42% 
drop  in  transaction  costs  for 
the  state  agencies  involved. 


cussion  expanded  the  gate¬ 
way’s  scope.  It  was  originally 
planned  as  a  mere  registra¬ 
tion  tool,  but  Jackson  and 
the  new  sponsor  agreed  to 
make  it  a  more  ambitious 
transactional  portal. 

The  next  challenge  was  to 


fund  the  project.  Jackson 
carved  out  $1.25  million  for 
initial  development,  and  in 
early  2002  a  large-scale  pilot 
was  launched.  The  Ohio  Busi¬ 
ness  Gateway  became  fully 
functional  in  2003;  program 
director  Joe  Zapotosky  esti¬ 
mates  ongoing  operational 
costs  at  $1.5  million  annually. 

By  all  accounts,  the  gate¬ 
way  was  an  immediate  smash 
hit.  In  addition  to  the  36% 
time  savings  enjoyed  by  Ohio 
businesses,  the  state  itself 
has  reduced  transaction  costs 
for  the  affected  agencies  by 
42%,  according  to  Jackson. 
“Ohio  deserves  great  credit 
for  putting  this  together,” 
Gartner’s  Kost  says. 

Jackson  says  that  if  he 
regrets  anything  about  the 
project,  it’s  that  because  of 
time  pressures,  “we  didn’t 
spend  as  much  time  on  the 
IT  architecture  as  we  might 
have  liked  to.”  The  state 
made  some  use  of  Web  ser¬ 


vices,  he  notes,  “but  there 
wasn’t  a  lot  of  time  spent 
thinking  about  how  [the 
portal]  is  going  to  play  out 
in  five  years.”  In  particular, 
Ohio  used  a  Microsoft-based 
architecture  but  did  the  bulk 
of  its  development  without 
exploiting  the  vendor’s  .Net. 

Among  the  state’s  next 
steps  are  possibly  shifting  to 
.Net  and  adding  an  XML  in¬ 
terface,  Zapotosky  says.  Al¬ 
ready,  Jackson’s  team  has  ex¬ 
panded  the  Ohio  Business 
Gateway  to  the  local-taxa¬ 
tion  level,  and  the  state  is 
working  with  the  Internal 
Revenue  Service  to  allow 
Ohio  businesses  to  pay  fed¬ 
eral  taxes  at  the  portal,  too. 

Small  wonder  that  the 
portal  has  been  widely 
imitated  by  other  states. 

©  44368 


Ulfelder  is  a  freelance  writer 
in  Southboro,  Mass.  Contact 
him  at  sulfelder@charter.net. 


( 


justified  based  on  its  merits. 

By  breaking  the  project 
into  parts,  the  IT  team  ulti¬ 
mately  was  able  to  put  to¬ 
gether  a  huge  single  instance 
of  CRM  software,  says  Beth 
Eisenfeld,  an  analyst  at  Gart¬ 
ner  Inc.  Nortel  ex¬ 
ecutives  probably 
wouldn’t  have  ap¬ 
proved  the  project’s 
final  price  tag,  she 
adds,  if  it  had  been 
presented  in  one 
lump  sum. 

Ultimately,  the 
project,  which  cost  a 
total  of  $30  million, 
came  in  on  time  and 
on  budget  and  has  resulted 
in  one  of  the  largest  CRM 
implementations  in  the  high- 
tech  industry,  Nortel  claims. 

There  are  19,200  internal 
users  on  the  system,  along 
with  200,000  customers  and 


partners  who  can  access  the 
Nortel  service  applications. 

There  is  now  one  major 
call  center,  down  from  three, 
and  the  number  of  world¬ 
wide  toll-free  numbers  has 
dropped  from  500,  to  20. 
Nortel  has  also 
saved  $15  million  by 
retiring  some  of  its 
legacy  systems. 

The  customer 
payback  has  been 
even  bigger:  Cus¬ 
tomers  are  now 
able  to  configure  a 
switch,  check  an  or¬ 
der,  track  a  service 
ticket  or  access  doc¬ 
umentation  online.  The  aban¬ 
doned-call  rate  dropped  from 
7%  to  2%,  and  the  average 
time  to  answer  a  call  dropped 
from  50  seconds  to  14.  The 
entire  sales  cycle  has  also 
shrunk,  from  100  to  60  days. 


Albert  Hitchcock, 
CIO  at  Nortel  Net¬ 
works  Ltd. 


The  company  did  learn  a 
few  lessons  along  the  way. 

In  2002,  for  example,  Nortel 
found  that  it  needed  to  cre¬ 
ate  a  reporting  system  to 
make  sure  the  right  people 
got  the  data  appropriate  for 
them.  With  business  intelli¬ 
gence  software  from  Busi¬ 
ness  Objects  SA,  Nortel  cre¬ 
ated  a  reporting  system 
built  around  14  individual 
data  marts. 

This  has  resulted  in  a  rise 
in  storage  costs,  up  15%  an¬ 
nually,  and  the  staff  is  now 
reviewing  the  system  to  en¬ 
sure  that  only  pertinent  data 
is  being  extracted. 

The  company  was  moving 
fast  to  get  people  running  on 
the  system,  but  in  hindsight, 
it  should  have  spent  more 
time  doing  some  training, 
according  to  Mary  Kay  Wells, 
vice  president  of  value  chain 


Nortel 

Networks  Ltd. 

www.nortelnetworks.com 


■  Business:  A  telecommuni¬ 
cations  equipment  maker  that 
produces  core  switching,  wire¬ 
less  and  optical  systems  for 
telephone  carriers  and  data 
service  providers  worldwide. 

■  Project  champion: 

Albert  Hitchcock 

■  IT  department:  1,450 

■  Project  payback:  Nortel 
has  saved  $15  million  by  retiring 
some  of  its  legacy  systems  and 
has  reduced  its  abandoned-call 
rate  from  7%  to  2%. 


solutions  at  Nortel. 

“If  we  needed  to  do  it 
again,  we’d  emphasize  the 
training,”  Wells  says. 
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Business  changes  and 
IT  is  the  first  to  know  it 


Adapt.  Quickly.  HP  ProLiant  BL  blade 
systems.  By  combining  blade  servers, 
storage  and  networking  capabilities 
into  a  single  modular  system,  IT  has  the 
power  to  scale  quickly,  pool  resources 
and  manage  their  network  centrally. 

Be  ready  for  change  before  it  arrives. 
www.hp.com/info/proliant 
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Solutions  for  the  adaptive  enterprise. 
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we’re  able  to  identify  the  people  and 
the  resources  to  help  clients  solve 
problems,”  says  McCall. 

Before  selecting  AskMe,  McCall 
reviewed  the  department’s  business 
processes  to  see  where  the  gaps  in 
information  counseling  existed.  “We 
have  a  handful  of  trade  specialists  who 
know  everything  about  export  docu¬ 
mentation,  for  example,”  says  McCall. 
“But  if  they’re  located  in  Minnesota 
and  you  weren’t  in  the  local  office, 
you’d  never  know  they  existed.” 

Now  these  experts  can  post  answers 
according  to  different  subject  cate¬ 
gories,  upload  documents  or  even  di¬ 
rect  businesses  to  specialized  publica¬ 
tions  online.  The  information  is  re¬ 
usable  and  is  in  an  expanding  database. 
About  1,200  people  have  used  the  sys¬ 
tem  so  far,  saving  about  750  hours  of 
repetitive  work,  says  McCall.  There’s 
also  a  reporting  tool  that  managers  can 
use  to  track  the  technology’s  return  on 
investment  and  identify  topics  that  are 
popular  so  they  can  beef  up  their  ex¬ 
pertise  in  those  areas. 

With  the  huge  trade  deficit  that 
plagues  the  U.S.,  a  knowledge  manage¬ 
ment  system  that  helps  boost  U.S.  ex¬ 
ports  by  making  it  easier  to  tap  ex¬ 
perts’  know-how  is  a  clear  competitive 
advantage.  Similar  expertise  lies  hid¬ 
den  away  inside  most  companies. 

©  45227 

ALEXANDER 

KATSENELINBOIGEN 

The  Peculiar 
Nature  of 
Software 

Much  DEBATE  on  off¬ 
shoring  IT  jobs  re¬ 
volves  around  well- 
known  arguments. 

Proponents  of  offshore  outsourcing, 
who  are  generally  averse  to  protection¬ 
ist  measures,  tend  to  focus  on  the  tra¬ 
ditional  advantages  of  free  trade,  such 
as  a  more  efficient  allocation  of  labor 
resources  and  the  benefits  of  competi¬ 
tion  for  the  consumer.  Detractors  spot¬ 
light  the  hidden  costs  of  offshore  out¬ 
sourcing,  concerns  about  security  and 
the  potential  loss  of  skilled  IT  jobs  in 
the  U.S.  Their  remedies  include  pro¬ 
posing  legislation  designed  to  protect 
IT  jobs  and  setting  employment  re¬ 
quirements  for  companies  bidding  on 
government  projects. 


Recently,  an  alarm  has 
been  sounded  that  high-end 
IT  work  such  as  the  design 
of  software  and  the  devel¬ 
opment  of  innovative  soft¬ 
ware  is  being  claimed  by 
companies  overseas  [Quick- 
Link  45069].  If  so,  it  must  be 
remembered  that  software 
has  some  peculiar  aspects, 
including  tremendous  job- 
creation  potential,  no  mat¬ 
ter  where  it’s  developed. 

Imagine  that  a  program¬ 
mer  in  India  writes  a  pro¬ 
gram  so  useful  that  it  cre¬ 
ates  thousands  of  jobs  for 
developers  in  the  U.S.  to 
adopt,  support  and  enhance  its  func¬ 
tionality. 

New  software  products  have  had 
this  effect  many  times;  software  is  of¬ 
ten  not  a  final  product,  but  instead  a 
versatile  tool  that  can  be  used  in  the 
production  of  a  broad  range  of  goods 
and  services.  And  advances  in  software 
can  also  open  up  to  automation  areas 
that  were  previously  off  limits. 

From  this  perspective,  software  de¬ 


velopment  work  spans  a 
spectrum  that  ranges  from 
the  production  of  final 
goods  to  innovative  re¬ 
search  and  development. 
The  simple  commodity  de¬ 
velopment  work  at  one  end 
of  the  spectrum  resembles 
the  manufacturing  of  con¬ 
sumer  goods,  and  offshore 
outsourcing  may  indeed 
lead  to  a  partial  loss  of  such 
jobs  in  the  U.S.  At  the  other 
end  of  the  spectrum  is  in¬ 
novative  software  develop¬ 
ment.  The  potential  for 
such  software  to  create 
jobs  suggests  that  even  if 
some  of  this  work  is  done  overseas, 
there  would  still  be  benefits  for  U.S. 
programmers. 

So  it’s  difficult  to  assess  the  ultimate 
impact  of  offshore  outsourcing  on  the 
software  development  market  in  the 
U.S.  Whatever  the  tally,  it’s  up  to  us  to 
stay  competitive  by  focusing  on  tech¬ 
nology-intensive  development  that  re¬ 
quires  more  advanced  skills. 

Fortunately,  software  isn’t  a  market 


with  fixed  demand.  If  enough  shirts 
are  manufactured  in  China,  none  need 
be  made  in  the  U.S.,  but  the  same  isn’t 
true  of  software.  Not  only  is  it  a  market 
that’s  still  expanding,  but  its  expansion 
also  seems  to  fuel  further  expansion. 

In  the  foreseeable  future,  software  de¬ 
velopment  will  have  a  multiplier  effect. 
It  won’t  reach  a  saturation  point. 

Of  course,  any  technological  innova¬ 
tion  leads  to  a  shift  in  the  labor  market, 
and  there  are  losers  and  winners.  Usu¬ 
ally,  winners  aren’t  in  the  same  eco¬ 
nomic  sector  as  the  losers.  But  given 
the  peculiar  nature  of  software,  the 
ever-broadening  number  of  areas  in 
which  it’s  applied  and  the  fact  that  the 
demand  for  new  software  is  still  large¬ 
ly  concentrated  in  the  U.S.,  we’re  in 
good  shape  to  gain  a  piece  of  the  pie. 
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ANOTHER  POINT  OF  VIEW 

Computerworld’s  Robert  L.  Mitchell  has  other 
thoughts  about  the  impact  of  higher-level  IT  jobs 
moving  overseas.  Read  his  column  on  page  25. 

OMore  columnists  and  links  to  archives  of 
previous  columns  are  on  our  Web  site: 

www.computerworld.com/columns 


Programmer  Alexander 
KATSENEUNBOIQEN  in 
West  Orange,  N.J.,  is 
an  aficionado  of  elegant 
code  and  software  de¬ 
sign  patterns.  You  can 
contact  him  at 
sashakats@yahoo.com. 
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Testing  the  ‘Talent’ 

IT  TALENT  FROM  India  and  China 
has  been  characterized  as  dedi¬ 
cated,  cheap  and  just  as  good  as 
expensive  domestic  IT  staff.  My  ex¬ 
perience  has  been  otherwise.  Late 
in  2002,  a  group  of  contractors 
came  to  my  company  from  India  to 
work  on  a  pilot  project,  it  was  all 
low-profile  until  a  virus  we'd  thought 
we’d  eliminated  resurfaced.  It 
turned  out  that  the  contractors  had 
brought  the  virus  in  with  them.  As 
the  representative  from  desktop  en¬ 
gineering,  I  spent  the  most  time 
with  the  contractors  as  I  headed  the 
remediation  efforts  on  their  laptops. 

I  was  not  impressed.  The  laptops 
they  brought  in  didn’t  follow  a  stan¬ 
dard  configuration,  de  rigueurfor 
any  corporate  system  in  the  U.S. 
This  could  be  excused  as  being  typi¬ 
cal  of  machines  in  the  custody  of 
developers,  except  that  nearly  all  of 
the  laptops  had  seriously  out-of- 
date  antivirus  software  and  defini¬ 
tion  files,  and  about  half  had  no 
antivirus  software  installed  at  all. 
Needless  to  say,  most  of  these  ma¬ 
chines  were  heavily  infected  with  an 
assortment  ot  viruses  and  worms. 
Bill  McQueen 
San  Francisco 


Scrap  Spyware 

I’VE  BEEN  WAITING  for  one  of  the 

antivirus  vendors  to  take  the  lead 
in  blocking  spyware  and  hostile 
scripting,  but  nothing  has  happened 
[“Think  Outside  the  Gates,”  Quick- 
Link  44636].  It  amazes  me  that  ma¬ 
jor  corporations  are  letting  a  free¬ 
ware  scriptwriter  in  Germany  take 
the  lead  in  spyware  protection  with 
his  Spybot. 

What’s  the  problem?  Spyware 
and  hostile  scripts  are  viruses  and 
Trojan  horses. 

McAfee  and  Symantec,  I’m  wait¬ 
ing  for  you  to  do  your  jobs. 

Peter  Finn 

Sacramento, 

peterfmn@sbcglobal.net 


Helpful  Hackers 

IT  COULD  BE  ARGUED  that  inci¬ 
dents  like  the  code  leak  de¬ 
scribed  in  the  story  “Browser  Hole 
Discovered  After  Code  Leak” 
[QuickLink  44850]  result  in  the  ex¬ 
posed  product  becoming  stronger. 
In  that  case,  vendors  might  want  to 
allow  third  parties,  restrained  by 
nondisclosure  agreements,  to  re¬ 
view  code  to  expose  security  holes 
and  vulnerabilities. 


Sure,  hackers  love  to  find  holes, 
but  their  discoveries  force  vendors 
to  patch  those  holes. 

David  J.  Berniard 

Programmer/analyst, 

New  Orleans 


Managers’  Morals 

MUST  OBJECT  to  both  Mark 

Hall’s  characterization  ot  the  best 
project  managers  in  his  column 
“Thieves  Among  Us”  [QuickLink 
44234]  and  the  insinuation  that,  to 
succeed,  such  individuals  must  be 
less  than  upstanding  characters.  I 
would  have  much  preferred  to  read 
sentiments  toasting  the  creative  ge¬ 
nius  of  the  best  project  managers 
and  their  success  as  a  result  of  the 
latitude  afforded  them  by  their  ad¬ 
ministrative  heads. 

In  reading  Hall’s  commentary, 
the  question  arose  as  to  why  the 
project  managers  he  described  felt 
it  necessary  to  follow  clandestine 
tactics  in  order  to  achieve  their  ob¬ 
jectives  in  an  effective  manner.  Did 
their  management  not  afford  them 
the  opportunity  or  resources  neces¬ 
sary  to  pursue  such  endeavors  un¬ 
der  less  shady  circumstances? 

While  I  agree  that  the  best  proj¬ 
ect  managers  “aren’t  single-mind¬ 


ed,”  the  qualities  that  make  them 
great  are  bound  to  their  creativity  in 
process  and  direction,  not  to  a  char¬ 
acter  that  is  questionable  by  all  oth¬ 
er  measures. 

To  suggest  that  we  recruit  project 
managers  based  on  their  rap  sheets 
is  to  suggest  compromising  the 
most  valued  qualities  in  an  employ¬ 
ee:  honesty  and  integrity.  There  is 
absolutely  nothing  that  would  sug¬ 
gest  that  those  qualities  and  cre¬ 
ativity  are  mutually  exclusive  or  that 
they  are  inaccessible  in  project 
managers  today. 

Galen  R.  Work  Jr. 

Director,  Rutgers  University 
Computing  Services, 
Piscataway,  N.J. 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor,  Computerworld, 
PO  Box  9171, 500  Old  Connecticut 
Path,  Framingham,  Mass.  01701. 
Fax:(508)879-4843. 

E-mail:  letters@computerworld.com. 
Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 

OFor  more  letters  on  these  and 
other  topics,  go  to 

www.computerworld.com/letters 
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CAN  YOUR  SOFTWARE  TELL  YOU  WHICH  ONE? 


Business  Service  Management  solutions  from 
BMC  Software'  can.  They  automatically  prioritize 
IT  management  issues  according  to  business 
importance  and  alert  you  before  potential  problems 
can  impact  performance.  They  also  let  you  prioritize 
IT  investments  and  resource  allocations  to  optimize 
your  business  results.  So  you  can  solidly  align  your 
IT  investments  with  strategic  business  goals.  And 


©  BMC  Software  Inc. 


protect  the  delivery  of  vital  business  services  like 
online  transactions,  sales,  customer  service,  logistics 
and  distribution — whatever  is  most  critical  to  your 
company's  success.  It's  enterprise  management 
software  that  works  with  your  existing  IT  resources 
to  let  you  manage  what  matters  from  a  business 
perspective  and  execute  with  precision.  Find  out 
how  at  www.bmc.com/bsm50 


<bmcsoftware 
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AYBE  IT'S  THE 
sound  of  all  those 
tapping  feet  while 
users  wait  for  their 
spreadsheets  to 
open.  Maybe  man¬ 
agement  finally 
woke  up  to  the  cost 
of  replacing  those  hard  drives  one  by 
one  at  remote  offices. 

Whatever  the  reason,  many  com¬ 
panies  are  upgrading  to  a  common 
“sweet  spot”  of  2.3-  to  2.6-MHz  Pen¬ 
tium  4  desktops  and  1.6-  to  1.7-MHz 
Pentium  M  notebooks,  usually  with 
512MB  of  RAM  and  a  40GB  to  60GB 
hard  drive.  That  much  is  easy.  The 
tougher  questions  are  when  to  upgrade 
PCs  rather  than  replace  them  and  how 
to  use  this  round  of  purchases  to  drive 
down  long-term  support  costs  while 
boosting  business  benefits.  Here  are 
some  tips  from  those  who  have  already 
struggled  to  find  answers. 

Simplify,  Simplify,  Simplify 

“We  had  the  ‘Noah’s  ark  syndrome’  — 
we  had  two  of  everything,”  says  Tim 
Link,  CIO  at  Ohio  State  University 
Newark  and  Central  Ohio  Technical 
College.  Over  the  past  three  years,  he 
has  replaced  that  unwieldy  mix  of 
1,300  client  PCs  with  one  of  three  stan¬ 
dard  configurations  from  Dell  Inc.  PC 
support  calls  have  already  dropped 
22%,  and  Link  expects  them  to  be 
down  by  30%  when  final  results  are  in. 

Link  has  carefully  planned  how  to 
minimize  the  number  of  configura- 


If  you’re  finally  replacing  old  PCs,  buy  smart 
to  maximize  your  performance  and  long-term  savings. 

By  Robert  L.  Scheier 
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tions  he  must  support  as  he  replaces  one-third  of  his 
systems  each  year.  He’s  reluctant  to  go  to  a  four-year 
life  cycle  for  PCs  because  although  that  would  reduce 
PC  purchase  costs,  it  would  mean  more  individual 
models,  which  would  complicate  support  issues. 

Trying  to  open  files  from  different  versions  of  ap¬ 
plications  running  on  various  versions  of  Windows 
is  a  huge  headache  for  users  and  IT  managers,  and 
can  be  a  prime  driver  for  an  upgrade.  At  the  North 
Carolina  Department  of  Health  and  Human  Services 
in  Raleigh,  “it  got  to  the  point  where  a  person  sent 
an  Excel  spreadsheet  to  somebody  else,  and  they 
couldn’t  open  it”  because  they  were  running  a  differ¬ 
ent  version  of  Excel,  says  CIO  Don  Allen.  “That’s 
when  we  decided  we  had  to  do  something.” 

By  July  1,  the  department  hopes  to  have  replaced 
5,000  of  its  approximately  18,000  PCs  with  new  sys¬ 
tems  from  Hewlett-Packard  Co.  based  on  a  single 
system  “image”  of  the  same  processor,  operating  sys¬ 
tem  and  office  productivity  applications. 


THE  THIN-CLIENT  ALTERNATIVE 


Blade  servers  -  thin,  rack-mounted  units  that  use  far  less 
space  and  power  than  big,  boxlike  servers  -  have  taken  over 
the  data  center.  Hewlett-Packard  Co.  is  betting  that  the  next 
step  will  be  a  blade  PC  -  a  rack-mounted  CPU  dedicated  to 
one  user  and  linked  to  networked  storage  for  easy  data  back¬ 
up  and  recovery. 

HP's  Consolidated  Client  Infrastructure,  introduced  in  De¬ 
cember,  “moves  all  the  infrastructure  into  the  data  center,  where 
it’s  more  secure”  and  can  be  more  easily  maintained,  says 
Keith  LeFebvre,  vice  president  of  business  PCs  for  the  Ameri¬ 
cas  region  at  HP’s  Personal  Systems  Group.  The  company 
claims  that  this  can  cut  lifetime  PC  maintenance  costs  in  half. 

Steve  Acterman,  director  of  corporate  IT  management  at 
the  Orange,  Calif.,  office  of  Volt  Information  Sciences,  likes  the 
concept  because  of  its  similarities  to  the  X  terminal  environ¬ 
ment  he  once  managed,  where  only  the  user  interface  ran  on 
the  client  PC  and  most  application  logic  ran  on  the  server. 

"There  were  some  tremendous  advantages  in  terms  of  more 
effectively  utilizing  your  computing  resources,  as  well  as  the 
maintenance  and  the  support,"  he  says.  One  possible  stum¬ 
bling  block,  though,  is  the  cost  of  any  upgrades  Acterman 
needs  for  his  WAN  to  handle  the  extra  traffic. 

Many  customers  are  looking  at  more  centralized  or  server¬ 
centric  computing  models  because  of  the  frequent  security 
vulnerabilities  found  in  desktops  or  notebooks  running  Win¬ 
dows,  says  Gartner  Inc.  analyst  Mark  Margevicius.  As  IT 
managers  put  more  of  a  load  on  the  server,  he  says,  this 
will  reduce  the  need  for  a  new.  more  powerful  client  PC  on 
the  user's  desk. 

-  Robert  L.  Scheier 


Keep  It  Longer 

“I’ve  been  in  the  industry  more  than  a  decade,  and 
today’s  stuff  is  able  to  run  a  lot  longer  [than  earlier 
PCs],”  says  Roger  Wilding,  a  senior  technical  engi¬ 
neer  at  CNF  Inc.,  a  global  transportation  and  logis¬ 
tics  company  in  Palo  Alto,  Calif.  He’s  replacing  some 
of  his  older  12,000  desktops  and  notebooks  with  new 
Dell  systems  and  plans  to  keep  them  four  to  five 
years,  “waterfalling”  the  most  capable  PCs  to  less- 
demanding  users  as  they  are  replaced. 

Given  typical  failure  rates,  most  organizations  can 
safely  plan  to  keep  a  desktop  PC  four  years,  says 
Mark  Margevicius,  an  analyst  at  Gartner  Inc.  in 
Stamford,  Conn.  If  the  system  fails  after  the  standard 
three-year  warranty  period,  he  suggests  replacing  it 
rather  than  spending  time  to  fix  it. 

For  notebooks,  which  face  rougher  handling  by 
users,  Margevicius  suggests  sticking  to  the  tradition¬ 
al  three-year  replacement  cycle. 

The  four-year  cycle  worked  fine  for  John  Mont¬ 
gomery,  vice  president  and  chief  technology  officer 
of  Embarcadero  Systems  Corp.,  a  provider  of  ship¬ 
ping  terminal  management  services  and  cargo  man¬ 
agement  systems  in  Alameda,  Calif.  By  upgrading  the 
memory  from  128MB  to  256MB,  he  has  managed  to 
upgrade  many  older  systems  so  they  can  run  Win¬ 
dows  2000. 

Some  users  buy  higher-end  systems  to  stretch  the 
machines’  life  span  or  reduce  the  need  for  future  up¬ 
grades.  For  example,  Link  buys  PCs  with  a  3-GHz 
processor  and  a  full  gigabyte  of  memory.  “I  don’t 
want  to  have  to  buy  a  memory  upgrade,  I  don’t  want 
to  buy  a  hard-drive  upgrade.  I’m  looking  to  get  these 
as  hands-off  as  possible,”  he  says. 

While  PC  replacement  cycles  are  stretching  out, 
Margevicius  suggests  that  adding  memory  is  about 
the  only  work  worth  doing  on  an  older  machine. 
Dallas-based  Wyndham  International  Inc.  is  replac¬ 
ing  about  2,000  PCs  and  boosting  the  memory  in 
another  1,000  from  128MB  to  256MB  or  512MB.  But 
only  systems  with  at  least  a  500-MHz  Pentium  III 
get  upgraded  rather  than  replaced,  according  to 
Mark  Hedley,  senior  vice  president  and  chief  tech¬ 
nology  officer. 

“If  it’s  something  as  simple  as  replacing  a  mouse 
or  a  keyboard,”  it  pays  to  fix  the  problem  without 
worrying  what’s  inside  the  box,  says  Steve  Acterman, 
director  of  corporate  IT  management  at  the  Orange, 
Calif.,  office  of  Volt  Information  Sciences  Inc.,  a  pro¬ 
fessional  services  firm.  But  Acterman  plans  to  re¬ 
place  Volt  systems  older  than  Pentium  Ills  with  1,200 
to  1,500  PCs  from  HP  by  June. 

Don’t  Forget  Service  and  Support 

“Don’t  get  hung  up  on  the  name  brand,”  says  Wild¬ 
ing.  “If  you  look  inside  the  guts  of  a  PC,  they’re  be¬ 
coming  more  and  more  a  commodity  item  like  a 
toaster.”  Instead,  he  says,  focus  on  which  contractors 
the  vendor  uses  to  support  remote  offices  and  the 
quality  of  the  vendor’s  service. 

For  example,  some  vendors  will  automatically  re¬ 
place  PCs  and  even  automatically  update  software 
for  a  fixed  price  per  seat.  But  Margevicius  warns 
these  services  work  best  for  companies  with  strict 
controls  over  what  PCs  users  can  buy.  If  not,  he  says, 
“you’ll  get  nickel  and  dimed”  with  extra  charges  to 


TYPICAL  CONFIGURATIONS 


DESKTOPS 

PRICE 

2.3-  to  3-MHz  Pentium  4  processor 

512MB  RAM 

$800-$1,500 

40GB-60GB  hard  drive 

%  ; 

NOTEBOOKS 

PRICE 

1.6-  to  1.7-MHz  Pentium  M  processor 

$1,500- 

$2,000 

518MB  RAM 

40MB  hard  drive 

Note:  Configuration  ranges  for  average  knowledge  workers; 
pricing  reflects  corporate  discounts. 

SOURCE:  COMPUTER  WORLD  INTERVIEWS 


WHAT’S  HOT,  WHAT’S  NOT 


WHAT’S  HOT 

WHY 

USB  key  storage 

Portable,  high  capacity,  reliable 

Optical  media 

High  capacity,  low  cost 

Flat  panels 

Thinner,  less  power  consumption 

WHAT’S  NOT 

WHY 

3.5-in.  floppies 

Unreliable,  low  capacity,  security  risk 

CRTs 

Use  more  desk  space  and  energy 
(but  still  cheaper  than  flat  panels) 

SOURCE:  COMPUTERWORLO  INTERVIEWS 


support  any  nonstandard  configurations. 

Allen  is  relying  on  Affiliated  Computer  Services 
Inc.  in  Dallas  to  perform  regular  hardware  and  soft¬ 
ware  updates  across  offices  in  all  100  North  Carolina 
counties.  IT  managers  should  be  sure  a  vendor  has 
the  processes  and  qualified  subcontractors  to  handle 
such  work  over  a  wide  area,  he  says. 

Remember  Education  and  Training 

With  the  move  toward  fewer,  more  standard  configu¬ 
rations,  users  need  to  learn  that  “they  don’t  have 
some  of  the  freedoms  they  had  before,”  says  Allen. 
Rather  than  buy  new  systems  whenever  they  find  the 
money  or  download  software  from  the  Internet,  he 
says,  users  must  accept  getting  hardware  and  soft¬ 
ware  upgrades  on  a  departmentwide  schedule. 

Users  also  “have  to  allow  us  time  to  come  in  and 
replace  their  systems,”  says  Allen.  “They  can’t  tell  us 
‘We’re  too  busy  today;  come  back  in  two  weeks.’  ” 
And  rather  than  asking  a  neighbor  for  help,  he  says, 
they  must  call  the  help  desk,  which  can  then  gener¬ 
ate  a  trouble  ticket  “so  we  can  track  how  long  it  takes 
to  get  problems  resolved.” 

Wilding  also  suggests  that  corporate  IT  discuss 
and  agree  on  procedures  with  remote  offices  specify¬ 
ing  when  a  PC  should  be  replaced  rather  than  up¬ 
graded.  “Set  your  policies  up  ahead  of  time,”  he  ad¬ 
vises,  “so  you’re  not  fighting  [over  replacements]  bit 
by  bit.”  ©  45099 


Scheier  is  a  freelance  writer  in  Boylston,  Mass.  He  can 
be  reached  at  rscheier@charter.net. 
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Telelogic  Upgrades 
UML-based  Tools 

Telelogic  AB  in  Malmo,  Sweden, 
announced  last  week  that  the 
new  version  of  its  DOORS/Analyst 
requirements  management  tool 
will  be  integrated  with  the  up¬ 
graded  editions  of  its  TAU/Archi- 
tect  and  TAU/Developer  develop¬ 
ment  tools,  which  are  based  on 
the  Unified  Modeling  Language 
(UML)  2.0  specification.  TAU/ 
Developer  2.3,  which  already 
supported  the  C  language,  will 
add  model-driven  code  genera¬ 
tion  for  C++  and  Java  and  provide 
integration  with  other  platforms. 
The  new  versions  are  expected  to 
be  released  on  April  30. 


Hitachi  Launches 
Deskstar  ATA  Drive 

Hitachi  Global  Storage  Technolo¬ 
gies  Inc.  in  San  Jose  last  week 
announced  its  highest-capacity 
3.5-in.  ATA  hard  drive,  the 
400GB  Deskstar  7K400.  The 
new  drive  has  been  designed  for 
audio/video  and  Serial  ATA  near- 
line  storage  environments. 


SAS  Announces 
Service-Level  App 

Business  intelligence  software 
vendor  SAS  Institute  Inc.  has  an¬ 
nounced  a  tool  to  help  companies 
view  their  IT  organizations,  run 
analysis  on  relevant  data  and  en¬ 
sure  that  corporate  performance 
levels  are  being  maintained.  The 
IT  Service  Level  Management  ap¬ 
plication  ships  next  month  and 
will  start  at  $30,000. 


Nexaweb  Updates 
Dev  Platform 

Nexaweb  Technologies  Inc.  in 
Cambridge,  Mass.,  last  week  an¬ 
nounced  availability  of  Nexaweb 
Software  Platform  3.0  for  build¬ 
ing  and  deploying  rich-client  In¬ 
ternet  applications.  New  features 
include  a  visual  development  en¬ 
vironment,  server  clustering  and 
support  for  Web  services.  Server- 
based  pricing  starts  at  $30,000. 


ROBERT  L.  MITCHELL 


Outsourced  Itself 


Americans  have  an  unwavering  faith 
that  technology  can  solve  all  of  their 
problems,  but  they  tend  to  forget  that  it 
also  creates  new  ones  in  the  process.  The 
leading  edge  of  technology  innovation 
often  cuts  both  ways.  Perhaps  the  best  example  of  this 
is  the  current  election-year  brouhaha  over  the  acceler¬ 
ating  trend  of  outsourcing  U.S.  jobs  in  general  —  and 


IT  jobs  in  particular.  IT  ad¬ 
vances  aren’t  the  sole  cause 
of  the  jobs  exodus,  but  as 
many  laid-off  programmers 
and  call  center  staffers  have 
come  to  realize,  IT  innova¬ 
tions  have  accelerated  that 
trend. 

Some  effects  are  subtle. 

For  example,  voice-over-IP 
telephony  systems  and  the 
ability  to  route  converged 
voice  and  data  traffic 
through  private  global  net¬ 
works  is  cutting  telephone 
system  infrastructure  and 
operating  costs.  Along  the  way,  IT  jobs 
are  disappearing  as  voice  and  data  net¬ 
working  functions  merge.  The  technolo¬ 
gy  also  makes  it  easier  and  less  expen¬ 
sive  to  route  help  desk  and  customer 
support  calls  to  distant  call  centers  in 
places  like  India,  where  labor  costs  may 
be  one-fifth  of  what  companies  typically 
pay  U.S.  workers. 

Likewise,  the  rise  of  the  PC  years  ago 
helped  level  the  playing  field  for  aspir¬ 
ing  programmers  everywhere  by  putting 
unprecedented  computing  power  into 
the  hands  of  people  and  institutions  that 
could  never  have  afforded  access  to  a 
mainframe.  And  with  the  emergence  of 
the  Internet  and  collaborative  tools,  lo¬ 
cal  development  groups  have  evolved 
into  virtual  teams  with  a  global  reach. 
Team  members  can  be  quickly  selected 
and  assembled  based  on  expertise  and 
lowest  labor  cost. 

The  rapid  pace  of  technical  change 
has  always  discounted  technical  experi¬ 
ence,  making  it  easy  for  the  new  kid  on 
the  block  to  catch  up.  New  hires,  fresh 


from  graduate  school  and 
steeped  in  the  latest  tech¬ 
nologies,  have  often  taken 
the  exciting  positions  while 
veteran  programmers  were 
shunted  into  dead-end  jobs 
maintaining  legacy  systems 
and  products.  Sorry,  the  new 
guy  doesn’t  do  Cobol.  Today, 
the  new  kids  aren’t  even  on 
your  block.  The  plum  proj¬ 
ects  are  moving  overseas, 
where  competent  program¬ 
mers  can  be  hired  for 
salaries  of  $10,000  or  less. 
Meanwhile,  the  program¬ 
ming  process  itself  is  becoming  more 
efficient  and  automated,  reducing  the 
number  of  programmers  needed.  Some 
companies  have  begun  embracing  tech¬ 
niques  such  as  extreme  programming, 
which  advocates  say  improves  both  pro¬ 
ductivity  and  software  quality.  One  com¬ 
pany  I  recently  spoke  with  claimed  to 
have  seen  a  40%  productivity  gain  on 
some  projects,  which  greatly  reduced 
programmer  time. 

Until  now,  many  IT  professionals  have 
rationalized  that  only  less  desirable,  low- 
level  positions  were  under  threat  —  jobs 
like  the  one  I  once  had  in  a  PC  vendor’s 
tech-support  department.  Management 
there  used  commercial  spyware  to  moni¬ 
tor  my  computer  and  telephone  activity, 
tracked  bathroom  breaks  and  put  the 
pressure  on  to  complete  as  many  calls  as 
possible  by  publicly  posting  daily  statis¬ 
tics  on  each  staff  person’s  call  volumes 
and  average  call  times.  Competition  was 
intense  because  those  at  the  bottom  of 
the  list  were  routinely  fired.  No  one  as¬ 
pires  to  that  kind  of  job. 


But  what’s  shocking  to  many  IT  work¬ 
ers  is  how  quickly  the  better  jobs  further 
up  the  food  chain  are  disappearing.  Soft¬ 
ware  engineering  and  hardware  design 
jobs  are  following  basic  programming 
and  call  center  positions  out  of  the  coun¬ 
try.  In  some  cases,  entire  research  and 
development  operations  are  moving  to 
places  like  India,  where  companies  such 
as  Google  have  established  a  presence. 

Taken  together,  these  trends  add  up 
to  tough  times  for  many  IT  profession¬ 
als.  With  as  many  as  one  in  10  IT  jobs 
expected  to  go  overseas  this  year,  ac¬ 
cording  to  Gartner  Inc.,  and  other  posi¬ 
tions  being  eliminated,  it’s  not  surprising 
that  the  unemployment  rate  in  the  in¬ 
dustry  has  jumped  above  the  national 
average.  Politicians  can  rail  against  the 
outsourcing  epidemic,  but  protectionist 
efforts  won’t  stem  the  tide.  Given  the 
compelling  business  advantages  of  glob¬ 
alization,  this  trend  will  only  increase. 

What’s  an  IT  professional  to  do?  Tech¬ 
nologists  accustomed  to  jumping  from 
one  hot  technology  area  to  the  next  may 
soon  find  that  this  time,  technology 
alone  won’t  solve  their  employment 
problems.  Instead,  the  safest  jobs  —  and 
the  most  rewarding  ones  —  will  be  those 
that  require  a  deeper  understanding  of 
an  employer’s  business  and  unique  busi¬ 
ness  processes.  Jobs  where  staffers  work 
in  IT  silos  —  those  that  can  be  easily  iso¬ 
lated  and  compartmentalized  —  are  easy 
to  outsource.  Jobs  that  require  acting  on 
an  understanding  of  corporate  business 
processes  and  culture  are  not. 

More  than  ever,  good  communication 
skills  matter.  The  arrogant,  antisocial 
techie  who  just  wants  to  write  code  in 
his  cube  is  an  endangered  species.  Those 
who  work  well  in  collaborative  groups 
are  more  likely  to  succeed,  and  those 
who  can  manage  multicultural,  virtual 
teams  and  have  strong  project  manage¬ 
ment  skills  will  fare  even  better.  Gaining 
those  new  skills  and  positions  won’t  be 
easy  —  it  never  is.  But  it’s  much  better 
than  the  alternative.  O  45286 


MORE  ON  OUTSOURCING 

For  another  take  on  the  trend  of  higher-level  IT  jobs 
moving  offshore,  see  “The  Peculiar  Nature  of  Software" 

on  page  21 
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They  have  a  variety 
of  different  titles, 
but  these  analysts 
work  with  the  IT 
and  business 
groups  to  improve 
data  quality  and 
standardization. 

By  Mary  Brandel 


A  CUSTOMER  IS  A  CUSTOMER  is  a 

customer,  right?  Actually,  it’s 
not  that  simple.  Just  ask 
Emerson  Process  Manage¬ 
ment,  an  Emerson  Electric 
Co.  unit  in  Austin  that  sup¬ 
plies  process  automation  products. 
Four  years  ago,  the  company  attempted 
to  build  a  data  warehouse  to  store  cus¬ 
tomer  information  from  over  85  coun¬ 
tries.  The  effort  failed  in  large  part  be¬ 
cause  the  structure  of  the  warehouse 
couldn’t  accommodate  the  many  varia¬ 
tions  on  customers’  names. 

For  instance,  different  users  in  dif¬ 
ferent  parts  of  the  world  might  identify 
Exxon  as  Exxon,  Mobil,  Esso  or  Exxon¬ 
Mobil,  to  name  a  few  variations.  The 
warehouse  would  see  them  as  separate 
customers,  and  that  would  lead  to  in¬ 
accurate  results  when  business  users 


performed  queries. 

That’s  when  the  compa¬ 
ny  hired  Nancy  Rybeck  as 
data  administrator.  Rybeck 
now  leads  a  renewed  data 
warehouse  project  that  en¬ 
sures  not  only  the  stan¬ 
dardization  of  customer 
names  but  also  the  quality 
and  accuracy  of  customer 
data,  including  postal  ad¬ 
dresses,  shipping  address¬ 
es  and  province  codes. 

To  accomplish  this,  Em¬ 
erson  has  done  something  unusual:  It’s 
building  a  department  with  six  to  10 
full-time  “data  stewards”  dedicated  to 
establishing  and  maintaining  the  quali¬ 
ty  of  data  entered  into  the  operational 
systems  that  feed  the  data  warehouse. 

The  practice  of  having  formal  data 


Required 
Tech  Skills 


■  Basic  understanding 
of  data  modeling 

' 

■  Basic  understanding 
of  DBMS 


Strong  under¬ 
standing  of  data 
warehouses 


■  Technical  writing 


SOURCE:  CLAUDIA' IMHOFF. 
PRESIDENT  AND  FOUNDER 
OF  INTELLIGENT  SOLUTIONS 
INC  BOULDER.  COLO. 


ewards 


SEEK  CONFORMITY 


stewards  is  uncommon. 
Most  companies  recognize 
the  importance  of  data 
quality,  but  many  treat  it  as 
a  “find-and-fix”  effort,  to 
be  conducted  at  the  end  of 
a  project  by  someone  in 
IT.  Others  casually  assign 
the  job  to  the  business 
users  who  deal  with  the 
data  head-on.  Still  others 
may  throw  resources  at 
improving  data  only  when 
a  major  problem  occurs. 

“It’s  usually  a  seesaw  effect,”  says 
Chris  Enger,  formerly  manager  of  in¬ 
formation  management  at  Philip  Mor¬ 
ris  USA  Inc.  “When  something  goes 
wrong,  they  put  someone  in  charge  of 
data  quality,  and  when  things  get  bet¬ 
ter,  they  pull  those  resources  away.” 

Creating  a  data  quality  team  requires 
gathering  people  with  an  unusual  mix 
of  business,  technology  and  diplomatic 
skills.  It’s  even  difficult  to  agree  on  a 
job  title.  In  Rybeck’s  department, 
they’re  called  “data  analysts,”  but  titles 
at  other  companies  include  “data  quali¬ 
ty  control  supervisor,”  “data  coordina¬ 
tor”  or  “data  quality  manager.” 

“When  you  say  you  want  a  data  ana¬ 
lyst,  they’ll  come  back  with  a  DBA 
[database  administrator].  But  it’s  not 
the  same  at  all,”  Rybeck  says.  “It’s  not 
the  data  structure,  it’s  the  content.” 

At  Emerson,  data  analysts  in  each 
business  unit  review  data  and  correct 
errors  before  it’s  put  into  the  opera¬ 
tional  systems.  They  also  research  cus¬ 
tomer  relationships,  locations  and  cor¬ 
porate  hierarchies;  train  overseas 
workers  to  fix  data  in  their  native  lan¬ 
guages;  and  serve  as  the  main  contact 
with  the  data  administrator  and  data¬ 
base  architect  for  new  requirements 
and  bug  fixes. 

Continued  on  page  30 
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MANAGEMENT 


Continued  from  page  27 

As  the  leader  of  the  group,  Rybeck 
plays  a  role  that  includes  establishing 
and  communicating  data  standards, 
ensuring  data  integrity  is  maintained 
during  database  conversions  and  doing 
the  logical  design  for  the  data  ware¬ 
house  tables.  She’ll  also  oversee  imple¬ 
mentation  of  the  Group  1  Software  Inc. 
data  cleansing  system  and  work  with 
The  Dun  &  Bradstreet  Corp.,  whose 
database  is  used  for  company-name 
standardization  and  hierarchies. 

The  analysts  have  their  work  cut  out 
for  them.  Bringing  together  customer 
records  from  the  75  business  units 
yielded  a  75%  duplication  rate,  mis¬ 
spellings  and  fields  with  incorrect  or 
missing  data. 

“Most  of  the  divisions  would 
have  sworn  they  had  great  proc¬ 
esses  and  standards  and  place,” 

Rybeck  says.  “But  when  you 
show  them  they  entered  the 
customer  name  17  different 
ways,  or  someone  had  en¬ 
tered,  ‘Loading  dock  open 
8:00-4:00’  into  the  address 
field,  they  realize  it’s  not  as  clean 
as  they  thought.” 

Multitalented 

Although  the  data  steward  may  report 
to  IT  —  as  is  the  case  at  Emerson  and 
at  pharmaceuticals  company  Sanofi- 
Synthelabo  Inc.  —  it’s  not  a  job  for 
someone  steeped  in  technical  knowl¬ 
edge.  Yet  it’s  not  right  for  a  business 
person  who’s  a  technophobe,  either. 

You  need  someone  who’s  familiar 
with  both  disciplines,  like  Seth  Cohen. 
The  first  data  quality  control  supervi¬ 
sor  at  Sanofi  in  New  York,  Cohen  was 
hired  a  year  ago  to  help  design  auto¬ 
mated  processes  to  ensure  the  data 
quality  of  the  customer  knowledge 
base  that  Sanofi  was  beginning  to  build. 


Cohen  has  enough  technical  skills  to 
be  able  to  spec  out  a  data-cleansing 
system  and  then  work  with  a  developer 
to  make  sure  that  the  system  is  written 
correctly. 

But  having  worked  in  the  pharma¬ 
ceuticals  field  for  three  and  a  half 
years,  he  also  knows  the  industry’s 
specific  business  rules  and  under¬ 
stands  the  most  important  data  con¬ 
cerns  that  must  be  addressed  during 
the  requirements-gathering  stage. 

Data  stewards  should  have  business 
knowledge  because  they  need  to  make 
judgment  calls,  Cohen  says.  With 
Sanofi’s  data  warehouse,  for  instance, 
if  the  system  expects  to  get  numbers  in 
a  field  but  gets  a  string  of  letters  in¬ 
stead,  Cohen  must  decide  what’s 
wrong  and  how  to  correct  it. 

Mary  Pickett  is  another  data 
steward  who  has  a  mix  of  skills. 
When  she  joined  Winston  & 
Strawn  LLP,  a  law  firm  in 
Chicago,  she  considered  herself 
a  database  specialist.  Today, 
however,  her  title  is  “marketing 
applications  specialist,”  and 
one  of  her  primary  duties  is  to 
ensure  the  quality  of  Winston  & 
Strawn’s  contact  database. 

“Especially  in  this  economy  with 
people  moving  around,  it’s  a  highly 
charged,  dynamic  database  that  keeps 
changing,”  Pickett  says.  “If  it  sits  for  a 
month,  it’s  dirty  again.” 

Pickett  prefers  to  train  business 
users  from  within  the  company  to  keep 
the  data  clean.  Likely  candidates  in¬ 
clude  paralegals  or  secretaries  who 
manage  contact  lists  for  their  practice 
groups.  Still,  she  says,  it  takes  a  solid 
year  for  data  clerks  like  them  to  gain 
the  necessary  experience  to  move  up 
to  data  coordinator. 

The  reason:  They  need  to  learn  not 
only  how  to  sort  through  duplicate 


DATA  STEWARDS  AT  A  GLANCE 

Responsibilities 

Nontechnical 

i 

Create  business-naming  standards.  1 

1 

Skills  Required 

Standardize  entity  definitions. 

t  Solid  understanding  of  the  business 

*  Standardize  attribute  definitions. 

:  I 

f  Excellent  communications  skills 

t  Specify  business  rules. 

■  Objectivity 

*  Standardize  calculation  and 

<  Creativity 

summarization  definitions. 

! 

*  Diplomacy 

■  Create  entity  and  attribute  aliases. 

■  Ability  and  willingness  to  work  as 

Conduct  data-quality  analyses. 

i 

part  of  a  team 

V  *  Manage  sources  of  data  for  the 

Well-respected  knowledge  of  the 

data  warehouse. 

subject  area 

*  Specify  data  security. 

»*  Well-respected  knowledge  of  the 

1  Develop  data-retention  criteria. 

■ 

overall  corporation 
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company  names,  make  sure  contact 
names  are  associated  with  companies 
and  use  the  database’s  cleansing  tools, 
but  also  how  to  prioritize  which  clients 
are  the  most  important  to  work  on. 

“We  want  to  keep  our  top  clients  as 
clean  as  possible,”  Pickett  says. 

Perfection  Unattainable 

Indeed,  judgment  is  a  big  part  of  the 
data  steward’s  job  —  including  the 
ability  to  determine  where  you  don’t 
need  100%  perfection. 

At  OneSource  Information  Services 
Inc.,  a  provider  of  business  informa¬ 
tion  products  in  Concord,  Mass.,  orien¬ 
tation  sessions  include  a  speech  on  the 
inevitable  dirtiness  of  data.  But  at  the 
same  time,  says  Beth  Jacaruso,  director 
of  content  management  at  OneSource, 
the  company  “lives  and  dies  by  data 
quality.”  So  where  do  you  draw  the 
line?  That’s  where  data  stewards  come 
in:  deciding  what’s  “clean  enough.” 

Cohen  says  that  task  is  one  of  the 
biggest  challenges  of  the  job.  “100%  ac¬ 
curacy  is  just  not  achievable,”  he  says. 
“Some  things  you’re  just  going  to  have 
to  let  go  or  you’d  have  a  data  ware¬ 
house  with  [only]  15  to  20  records.” 

A  good  example  is  when  Sanofi  pur¬ 
chases  data  on  doctors  that  includes 
their  birth  dates,  Cohen  says.  If  a  birth 
date  is  given  as  Feb.  31  or  the  number 
of  the  month  is  listed  as  13  but  the  rest 
of  the  data  is  good,  do  you  throw  out 
all  of  the  data  or  just  figure  the  birth 
date  isn’t  all  that  important? 

It  comes  down  to  knowing  how 
much  it  costs  to  fix  the  data  vs.  the 
payback.  “You  can  pay  millions  of  dol¬ 
lars  a  year  to  get  it  perfect,  but  if  the 
returns  are  in  the  hundreds  of  thou¬ 
sands,  is  it  worth  it?”  asks  Chuck  Kel¬ 
ley,  senior  advisory  consultant  at  Navi¬ 
gator  Systems  Inc.,  a  corporate  perfor¬ 
mance  management  consultancy  in 
Addison,  Texas. 

Good  Diplomats 

Data  stewards  also  need  to  be  political¬ 
ly  astute,  diplomatic  and  good  at  con¬ 
flict  resolution  —  in  part  because  the 
environment  isn’t  always  friendly. 
When  Cohen  joined  Sanofi,  some 
questioned  why  he  was  there.  In  par¬ 
ticular,  IT  didn’t  see  why  he  was  “caus¬ 
ing  them  so  many  headaches  and 
adding  several  extra  steps  to  the 
process,”  he  says. 

There  are  many  political  traps,  as 
well.  Take  the  issue  of  defining  “cus¬ 
tomer  address.”  If  data  comes  from  a 
variety  of  sources,  you’re  likely  to  get 
different  types  of  coding  schemes. 
“Everyone  thinks  theirs  is  the  best  ap¬ 
proach,  and  you  need  someone  to  facil- 
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Resume  of  a 
Data  Steward 


Here’s  the  career  path 

of  Nancy  J.  Rybeck, 

data  administrator 
at  Emerson  Process 
Management: 


RYBECK 


MAY  2000  - 
PRESENT 

Emerson  Process 
Management: 
Data  warehouse 
architect,  project 
manager,  data 
administrator 


OCTOBER  1997  -  MAY  2000 

McLane  Company  Inc.: 

Data  administrator 


1985  - 1997 

Texas  Association  of  School  Boards: 
Senior  technical  consultant,  assis¬ 
tant  director  of  MIS/software  engi¬ 
neering,  assistant  director  of  data 
services/application  development, 
manager  of  systems  and  program¬ 
ming,  programmer/analyst 


1980  - 1985 

CarboMedics  Inc.: 
programmer/analyst 


EDUCATION: 

Bachelor  of  arts  degree  in  computer 
science,  St.  Edward’s  University, 
Austin 


itate,”  says  Robert  Seiner,  president 
and  principal  of  KIK  Consulting  &  Ed¬ 
ucational  Services  in  Pittsburgh. 

People  may  also  argue  about  how 
data  should  be  produced,  he  says. 
Should  field  representatives  enter  it 
from  their  laptops?  Or  should  it  first  be 
independently  checked  for  quality? 
Should  it  be  uploaded  hourly  or  week¬ 
ly?  If  you  have  to  deal  with  issues  like 
that  and  “you’re  argumentative  and 
confrontational,  that  would  indicate 
you’re  not  an  appropriate  steward,” 
Seiner  says. 

Most  of  all,  data  stewards  need  to 
understand  that  data  quality  is  a  jour¬ 
ney,  not  a  destination.  “It’s  not  a  one- 
shot  deal  —  it’s  ongoing,”  Rybeck  says. 
“You  can’t  quit  after  the  first  task.” 

O  45006 
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BRIEFS 


Emerson  Taps  CIO 
From  Invensys 

Emerson  Electric  Co.  in  St.  Louis 
recently  named  Stephen  C.  Has¬ 
sell  as  CIO.  He  will  be  responsible 
for  customer-focused  IT  pro¬ 
grams,  including  telecommunica¬ 
tions,  applications  and  hosting  for 
the  electrical  products  company. 
Hassell  previously  was  CIO  at 
London-based  Invensys  PLC. 


Briggs  &  Stratton 
Expands  AT&T  Deal 

Briggs  &  Stratton  Corp.,  which 
makes  engines  for  outdoor  power 
equipment,  awarded  AT&T  Corp. 
a  multimillion-dollar  global  net¬ 
working  contract.  The  contract 
renews  an  existing  deal  for  long¬ 
distance,  Internet,  teleconferenc¬ 
ing  and  domestic  data  services.  It 
also  adds  AT&T  managed  interna¬ 
tional  data  service  and  increased 
networking  capacity. 


Reader’s  Digest 
Outsources  Big  Iron 

The  Reader’s  Digest  Association 
Inc.  in  Pleasantville,  N.Y.,  recently 
confirmed  that  it  has  signed  a 
long-term  agreement  to  out¬ 
source  mainframe  operations  to 
Infocrossing  Inc.  in  Leonia,  N.J. 
Infocrossing  has  already  taken 
over  Reader’s  Digest’s  data  cen¬ 
ter  operations  and  is  planning  a 
June  migration  of  the  mainframe 
computing  infrastructure  to  Info- 
crossing’s  data  center. 


Digital  River  Hosts 
Online  Toy  Store 

Minneapolis-based  Manhattan 
Group  LLC,  known  as  Manhattan 
Toy,  last  week  launched  an  on¬ 
line  toy  store  built  and  hosted  by 
e-commerce  outsourcing  firm 
Digital  River  Inc.  Eden  Prairie, 
Minn.-based  Digital  River  not 
only  hosts  the  specialty  retailer’s 
site  ( www.manhattantoy.com ), 
but  also  provides  order  manage¬ 
ment,  product  fulfillment,  cus¬ 
tomer  service,  e-marketing  and 
fraud-prevention  screening. 


BARBARA  GOMOLSKI 


Going  Beyond 
Strategic  Platitudes 


CONVENTIONAL  WISDOM  says  that  if  you’re 
looking  to  develop  an  IT  strategy,  you  start 
with  the  business  strategy  and  go  from 
there.  On  the  surface  this  makes  sense,  but 
it  almost  never  works.  Business  strategies 
are  often  vague  and  downright  meaningless.  Browse  a 
handful  of  annual  reports,  and  you’ll  see  what  I  mean. 
Strategic  goals  like  “product  excellence,”  “increased 
shareholder  value,”  “growth  through  acquisition”  and 
“improved  customer  satisfaction”  don’t  say  much  about 
what’s  in  store  for  the  company  from  a  business  per¬ 
spective,  let  alone  what  the  IT  organization  should  do. 


To  create  a  good  IT  strat¬ 
egy,  IT  leaders  have  to  re¬ 
think  the  whole  concept  of 
strategy  development.  Most 
IT  professionals  are  intro¬ 
duced  to  the  concept  of 
strategic  planning  by  busi¬ 
ness  people,  who  devise  their 
plans  by  looking  at  the  mar¬ 
ketplace.  Business  people 
consider  which  markets  the 
company  will  compete  in, 
which  products  and  services 
they  will  sell  and  how  they 
will  execute  on  those  plans. 

That’s  great,  but  it’s  very  dif¬ 
ferent  from  the  way  good  IT  leaders 
develop  strategy. 

Let’s  assume  that  a  company  has  the 
best  strategic  business  planners  in  the 
world.  These  business  planners  have 
scanned  the  market  and  have  devel¬ 
oped  a  fully  fleshed-out  plan  to  build 
and  sell  products.  They  even  have  an 
excellent  operational  plan.  Even  in  this 
unlikely  scenario,  the  business  strat¬ 
egy  probably  won’t  tell  the  IT  leaders 
exactly  what  they  need  to  focus  on. 

Recognizing  this,  the  IT  leadership 
corners  the  business  people  and  tries 
to  “extract”  more  information  from 


them  in  order  to  develop 
an  IT  strategy.  This  doesn’t 
work,  either,  because  the 
business  people  don’t  fully 
understand  the  IT  implica¬ 
tions  of  their  business  plans. 
If  they  did,  they  might  not 
need  a  CIO! 

A  Better  Way 

While  developing  an  IT 
strategy  is  difficult,  it’s 
worth  doing.  Instead  of  look¬ 
ing  at  high-level  business 
strategies  for  guidance,  IT 
leaders  should  be  gathering 
information  about  key  areas  of  the 
business  in  order  to  determine  their 
strategy.  For  example,  looking  at  the 
following  areas  will  tell  you  more 
about  what’s  in  store  for  IT  than  those 
business-plan  platitudes: 

Geographic  expansion  and  corporate  virtu¬ 
alization.  Consider  how  far  the  IT  orga¬ 
nization  will  have  to  extend  itself  in 
the  coming  year.  Is  the  company  mov¬ 
ing  into  new  geographies?  If  so,  how? 
Also,  look  at  how  IT  will  have  to 
change  or  evolve  to  support  an  in¬ 
creasingly  virtual  enterprise.  Consider 
the  needs  and  issues  that  remote  em¬ 
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ployees  and  disconnected  business 
partners  will  present  to  IT. 

Governance  and  compliance.  How  is  the 
company  planning  to  make  key  deci¬ 
sions  in  the  future?  With  a  renewed  fo¬ 
cus  on  corporate  governance,  IT  deci¬ 
sion-making  is  evolving  in  many  com¬ 
panies.  These  changes  will  affect  the 
kinds  of  IT  initiatives  that  are  funded 
in  the  coming  years.  Also  consider 
how  compliance  with  the  latest  regula¬ 
tory  requirements  will  influence  IT 
priorities. 

Future  of  the  business.  How  is  the 

business  evolving?  A  company  that’s 
changing  from  being  a  manufacturer 
to  being  a  marketing  company  is  going 
to  see  a  major  shift  in  its  IT  priorities. 
Consider  what  the  IT  road  map  might 
look  like  as  the  business  undergoes  its 
transformation.  This  is  also  a  good 
time  to  look  at  how  customer  needs 
are  changing  and  how  those  changing 
needs  will  affect  IT. 

Business  attitude  toward  IT  spending. 

For  the  past  two  years,  most  compa¬ 
nies  have  been  in  a  cost-cutting  mode 
regarding  IT,  which  has  had  a  signifi¬ 
cant  effect  on  IT  strategies.  As  the 
economy  improves,  consider  how 
business  leaders’  attitudes  toward 
spending  money  on  IT  will  also 
change.  Consider  whether  the  willing¬ 
ness  to  invest  in  IT  will  keep  pace 
with  or  lag  the  economic  recovery. 

These  are  some  of  the  main  issues 
to  consider  when  developing  an  IT 
strategy,  but  it’s  not  an  exhaustive  list. 
IT  leaders  will  still  need  the  help  of 
business  executives  to  develop  an 
IT  road  map.  But  they  shouldn’t  ex¬ 
pect  the  business  strategy  to  miracu¬ 
lously  lead  them  to  an  IT  strategic 
plan.  ©  44893 
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DOES  LINUX  ADD  UP  TO  LOWER  TCO? 
ASK  THE  EXPERTS. 


Microsoft 


"Although  the  Linux  OS  itself  is  nominally  free, 

Linux  is  only  one  component  of  an  increasingly 
complex  application  infrastructure  stack.... 

From  a  total -cost- of- ownership  perspective, 
we  believe  the  overall  application  costs  of 
integration  and  ongoing  infrastructure 
management  and  support  far  outweigh  one-time, 
upfront  hardware  and  OS  software  costs." 

— META  Group,  November  2002 
Linux  Servers:  No  "Silver  Bullet"  for  Total  Cost  of  Ownership 


Leading  independent  research  analyst  META  Group  found  in  a  recent  study  that  Linux 
on  Intel  infrastructure  costs  are  not  lower  than  Windows®  on  Intel.  To  get  the  full  study 
and  other  third-party  findings,  visit  microsoft.com/getthefacts 


O  2004  Microsoft  Corporation.  All  rights  reserved.  Microsoft,  Windows,  the  Windows  logo,  and  Windows  Server  System  are  either  registered  trademarks  or  trademarks  of  Microsoft 
Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 
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Introducing  Firebox*  X.  It’s  all  the  integrated,  expandable  network 
security  your  company  really  needs.  All  inside  one  intelligent  box. 


©Copyright  2004.  WatchGuard  Technologies,  Inc.  All  rights  reserved.  WatchGuard,  The  Security  You  Really  Need  and  Firebox  are  either 
registered  trademarks  or  trademarks  of  WatchGuard  Technologies,  Inc.  and/or  its  subsidiaries  in  the  United  States  and/or  other  countries. 


WatchGuard 

Fireboxx 


VAIc 

The  Security  You  Really  Need.™  WatchGliard^^F 


FREE  NETWORK  11  Reality  Checks  to  Get  yours  by  visiting  www.watchguard.com/cwcya 

SECURITY  GUIDE  Help  the  CEO  ‘ CYA '  or  by  calling  1-877-732-8780. 
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Privacy  Potholes 

IT  managers  like  Nationwide 
Mutual’s  Kirk  Herath  (left)  offer 
advice  for  avoiding  process  and  tech¬ 
nology  potholes  when  complying 
with  privacy  regulations.  PAGE  36 


Losing  Control 

IT  pros  offer  tips  for 
controlling  sensitive 
customer  data  when  it’s  in 
the  hands  of  third-party 
outsourcers.  PAGE  38 


OPINION 

RFID  Privacy  Scare  Is  Overblown 

Columnist  Jay  Cline  says  the  RFID 
community  needs  to  counteract  the 
public  hysteria  about  possible  privacy 
abuses.  PAGE  44 


SPECIAL 

REPORT 


A  patchwork  of  inconsistent 
and  vague  laws  make  it  tough 
for  IT  to  do  the  right  thing. 


EDITOR' 

admit  IT:  I  was  a  policy  wonk.  : 

As  this  newspaper’s  Washing-  ; 
ton  correspondent  many  years 
ago,  I  covered  literally  hundreds 
of  congressional  hearings  — 
many  of  them  about  privacy.  I  had  my  : 
nose  in  the  fine  print  of  the  Federal  • 
Register  and  the  Congressional 
Record.  I  huddled  with  anonymous 
congressional  staffers  to  get  the  lat-  : 
est  markup  drafts  of  bills  in  subcom-  ; 
mittee.  I  used  to  be  able  to  quote  key  • 
passages  from  my  dog-eared  copies  ’• 
of  the  Computer  Fraud  and  Abuse 
Act  and  the  Electronic  Communica-  ; 
tions  Privacy  Act.  I  sat  in  the  Capitol 
galleries  and  watched  votes  for  land-  J 
mark  legislation. 

And  I  was  naive.  I  thought  that  the  : 
young  staff  attorneys  drafting  the 
legislation  knew  what  was  best  for 
the  country.  I  scoffed  at  industry 
complaints  about  various  provisions 


5  NOTE 

being  too  hard  to  implement.  Busi¬ 
nesses  also  feared  a  hodgepodge  of 
privacy  laws  across  the  50  states,  but 
I  was  skeptical  of  arguments  for  fed¬ 
eral  preemption  of  state  privacy  laws. 

Older  and  wiser  now,  I  know  that 
those  inconsistent  and  vague  laws 
can  make  it  tough  for  IT  managers  to 
comply  even  when  they  truly  want 
to.  The  best  intentions  of  those 
young  staff  attorneys  can  cause  seri¬ 
ous  headaches  for  business  folks  out¬ 
side  the  Capital  Beltway,  as  the  first 
story  in  this  special  report  shows. 

I  still  think  policy-makers  do  the 
best  they  can  when  they  write  the 
laws.  But  I’ve  learned  that  the  law  of 
unintended  consequences  is  the  most 
powerful  law  of  all.  O  45078 


Mitch  Betts  is  Computerworld’s 
Features  editor.  Contact  him  at 
mitch_betts@computerworld.com. 
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ompanies  working  hard 
to  comply  with  a  bewilder¬ 
ing  array  of  fast-changing 
state,  federal,  international 
and  industry-specific  pri¬ 
vacy  rules  are  uncovering 
a  variety  of  practical  problems  along 
the  way. 

Rising  concerns  over  personal  priva¬ 
cy  and  data-sharing  practices  have  fo¬ 
cused  on  increased  liability  risks  relat¬ 
ing  to  how  personal  data  is  handled.  At 
the  same  time,  the  trend  toward  ex¬ 
tending  the  enterprise  is  making  it 
harder  than  ever  for  companies  to  keep 
track  of  and  protect  such  data. 

IT  managers  dealing  with  these 
privacy  regulations  offer  their  best  ad¬ 
vice  for  avoiding  the  technology  and 
process  potholes. 

POTHOLE: 

Patchwork  of  Laws 

The  sheer  number  of  privacy  regula¬ 
tions  and  new  mandates  coming  down 
the  pike  make  privacy  compliance  a 
huge  challenge,  says  Kirk  Herath,  chief 
privacy  officer  at  Nationwide  Mutual 
Insurance  Co. 

Some  of  the  biggest  drivers  include 
the  Health  Insurance  Portability  and 
Accountability  Act,  the  Gramm-Leach- 
Bliley  Act,  the  Sarbanes-Oxley  Act  and 
California’s  SB  1386  identity  protection 
bill.  On  the  horizon  are  other  state  and 
federal  versions  of  SB  1386.  Several 
states  —  most  notably  California  — 
have  their  own  privacy  laws.  Interna¬ 
tional  rules,  such  as  those  covering  Eu¬ 
ropean  Union  nations  and  Canada,  are 
also  forcing  U.S.  companies  to  con¬ 
front  privacy  issues. 

“Over  the  past  two  years,  we’ve  had 


over  1,000  new  privacy  laws  that  have 
affected  us,”  says  Joel  Tietz,  chief  pri¬ 
vacy  officer  at  AXA  Financial  Services 
LLC  in  New  York. 

SIDESTEP:  Instead  of  trying  to  craft 
policies  for  every  single  law,  it’s  often 
better  to  try  to  comply  with  the  re¬ 
quirements  of  the  most  stringent  laws 
where  possible,  privacy  experts  say. 
Don’t  shoot  for  meeting  the  minimum 
requirements,  Tietz  adds.  “We  took  the 
best  of  what  we  saw  in  all  of  the  vari¬ 
ous  requirements,”  he  says.  The  com¬ 
pany  then  crafted  a  policy  to  meet 
those  standards. 

POTHOLE: 

Complex  Requirements 

Writing  a  standard  privacy  notice  that 
encapsulates  all  regulatory  and  legal 
requirements  can  be  a  huge  challenge, 
Herath  says.  Privacy  notices,  which  are 
required  in  every  state,  spell  out  a 
company’s  policies  for  handling  per¬ 
sonal  data.  Several  laws  require  com¬ 
panies  to  clearly  articulate  what  they 
can  or  can’t  do  with  confidential  infor¬ 
mation.  But  differing  requirements 
make  it  hard  to  draft  a  standard  policy, 
Herath  says. 

For  instance,  at  least  17  states  still 
use  privacy  provisions  from  a  1982  in¬ 
formation  practice  act  that  requires  in¬ 
surance  companies  to  use  specific 
phrases  —  relating  to  how  information 
might  be  shared  for  law  enforcement 
purposes,  for  example  —  when  craft¬ 
ing  a  privacy  policy. 

Much  of  the  language  contained  in 
such  laws  is  written  at  a  college  read¬ 
ing  level.  “Yet  you  have  to  economize 
on  your  language  and  the  complexity 


Putting  privacy  legislation  into 
practice  means  learning  how 
to  sidestep  legal  and  technical 
problems.  By  Jaikumar  Vijayan 


of  what  you  are  saying”  to  get  the  no¬ 
tice  down  to  a  ninth-grade  reading  lev¬ 
el  to  meet  some  state  requirements, 
says  Herath.  For  instance,  “instead  of 
talking  about  how  we  can  share  infor¬ 
mation  for  law  enforcement  and  anti¬ 
fraud  purposes,  you  boil  it  down  to  ‘as 
required  by  law,’  ”  he  says.  Similarly, 
some  states  require  that  companies  in¬ 
clude  opt-in  policies  in  their  privacy 
statements.  Opt-in  policies  require 
companies  to  seek  and  receive  a 


user’s  permission  to  collect  and  use 
personal  data. 

SIDESTEP:  Here  again,  Herath  suggests 
making  the  policy  as  broadly  applica¬ 
ble  as  possible.  Start  with  the  most 
stringent  requirements  first  and  draft  a 
policy  statement  written  for  those  re¬ 
quirements. 

“It  can  be  done,  but  not  easily,”  says 
Herath.  Drafting  a  solid  policy  can  take 
several  weeks  to  several  months  and 
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requires  input  from  business  units  as 
well  as  legal  and  compliance  teams, 
says  Herath,  who  manages  35  such 
notices  for  Columbus,  Ohio-based 
Nationwide’s  business  units. 

POTHOLE: 

Far-flung  Data 

But  it’s  not  enough  to  say  what  you’ll 
do.  You  also  need  to  do  what  you  say. 
And  that  means  putting  in  place  the 
technology  and  processes  to  monitor 
and  ensure  compliance  with  stated  pri¬ 
vacy  policies,  experts  say. 

“The  biggest  issue  facing  corpora¬ 
tions  with  respect  to  privacy  is  estab¬ 
lishing  control  over  all  their  data,”  says 
Arshad  Noor,  CEO  of  StrongAuth  Inc., 
a  Cupertino,  Calif.-based  identification 
management  firm. 

This  data  includes  not  only  what’s 
on  production  systems  and  backup 
servers  and  sites,  but  also  everything 
stored  on  distributed  client  systems 
and  flowing  across  enterprise  and 
partner  networks,  he  says. 

SIDESTEP:  To  gain  control,  says  Noor, 
companies  must  establish  a  detailed 
inventory  of  all  sensitive  data  every¬ 
where  in  the  corporation,  review  all 
controls  relating  to  the  use  of  that  data 
and  set  up  controls  and  procedures  to 
protect  the  data. 

“All  of  this  will  require  capital  ex¬ 
pense,  potentially  hiring  new  people 
and  buying  new  tools,”  he  says. 

POTHOLE: 

Honoring  Customer 
Preferences 

Technology  advancements  have  made 
it  easier  for  companies  to  use  and 
manipulate  customer  data,  but  that 
also  makes  it  imperative  to  monitor 
and  ensure  privacy  compliance,  says 
Tietz. 

For  example,  because  AXA’s  CRM 
systems  allow  it  to  mine  customer 
data,  the  company  has  to  be  careful 
that  the  information  isn’t  being  com¬ 
bined  or  shared  in  a  manner  that 
doesn’t  gel  with  a  customer’s  privacy 
preferences,  Tietz  says. 

“I  view  technology  as  one  of  my 


THE  ANNUAL  COST  OF 
PRIVACY  PROGRAMS 

Companies  spend  more  on  privacy 
activities  as  their  programs  mature. 
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backstops  to  ensure  that  data  is  not 
flowing  in  an  inappropriate  manner,” 
he  says. 

SIDESTEP:  AXA  has  built  a  database 
that  consolidates  customer  informa¬ 
tion  from  multiple  applications  and 
production  systems.  Each  customer 
record  in  the  database  has  an  embed¬ 
ded  “privacy  indicator”  that  describes 
in  detail  that  customer’s  privacy  pref¬ 
erences.  The  database  is  linked  to 
every  legacy  application  at  AXA.  The 
goal  is  to  make  sure  that  a  customer’s 
privacy  preferences  are  always  re¬ 
spected,  regardless  of  which  applica¬ 
tion  is  accessing  the  customer  data, 
Tietz  says. 

“Many  departments  are  charged 
with  using  customer  information  to 
make  a  profit  for  the  company,”  Tietz 
says.  “An  aggressive  use  of  such  infor¬ 
mation  may  be  beneficial  to  the  bot¬ 
tom  line  but  must  always  be  weighted 
against  privacy  needs.” 

AXA,  which  manages  more  than 
$450  billion  in  assets,  also  uses  a  Web 
monitoring  tool  to  ensure  that  the  in¬ 
formation  on  its  Web  pages  and  its  use 
of  cookies  are  compliant  with  the  com¬ 
pany’s  stated  privacy  policy,  Tietz  says. 

POTHOLE: 

Vague  Language 

The  lack  of  legal  precedent  and  imple¬ 
mentation  guidelines  poses  a  problem 
for  companies  trying  to  figure  out  the 
best  way  to  mitigate  exposure  to  legal 
risk,  says  Erin  Kenneally,  a  forensic  an¬ 
alyst  at  the  San  Diego  Supercomputer 
Center  at  the  University  of  California, 
San  Diego. 

Privacy  laws  such  as  Gramm-Leach- 
Bliley  and  SB  1386  merely  specify  what 
is  expected  of  companies  from  a  regu¬ 
latory  standpoint  without  explaining 
what  they  need  to  do  from  an  imple¬ 
mentation  standpoint,  Kenneally  says. 


“I  see  it  as  a  combination  of  seman¬ 
tic  differences  between  the  legal  and 
policy  folks  who  write  the  laws  and  the 
techies  who  have  to  implement  them. 

It  becomes  an  issue  of  extrapolating 
technical  solutions  from  abstract  ideas 
and  words,”  Kenneally  says. 

Examples  of  such  vagueness  abound. 
California’s  SB  1386  requires  compa¬ 
nies  to  “encrypt”  data,  but  it  doesn’t 
specify  the  level  of  encryption  re¬ 
quired.  Similarly,  the  law  requires 
companies  to  inform  customers  of  any 
“unauthorized  access”  to  their  data  but 
doesn’t  define  what  constitutes  unau¬ 
thorized  access. 

As  a  result,  companies  may  decide 
to  “just  do  the  very  minimum  and 
comply  with  the  letter  of  the  law, 
while  in  practicality  [that  doesn’t] 
really  provide  the  protection  that 
the  spirit  of  the  law  was  meant  to  ad¬ 
dress,”  Kenneally  says.  “It  is  entirely 
conceivable  that  a  civil  or  a  criminal 
claim  under  SB  1386  could  be  raised  if 
minimal,  almost  ineffectual  measures 
are  used.” 

SIDESTEP:  The  key,  again,  is  to  take  the 
high  road.  The  best  way  to  demon¬ 
strate  due  diligence  is  to  comply  with 
the  requirements  of  the  most  stringent 
law  that’s  applicable  to  you,  Kenneally 
advises. 

POTHOLE: 

Uncontrolled  Partners 

Programs  for  monitoring  the  privacy 
habits  of  your  vendors,  business  part¬ 
ners  and  supply  chain  companies  are 
also  needed,  says  Herath.  It’s  crucial 
to  realize  that  a  company  owning  the 
data  is  responsible  for  it  even  if  a  secu¬ 
rity  breach  is  associated  with  a  partner, 
he  says. 

“As  we  use  more  third  parties,  vet¬ 
ting  them  and  the  contracts  they  sign 


becomes  more  important  and  more 
difficult,”  Herath  says. 

SIDESTEP:  Nationwide  has  implement¬ 
ed  a  few  third-party  monitoring  and 
compliance  measures  to  address  the 
problem. 

All  companies  doing  business  with 
Nationwide  have  to  fill  in  a  Web-based 
self-assessment  form  that  allows  the 
insurer  to  quickly  gauge  the  strength 
of  its  partners’  privacy  practices  and 
sort  them  into  separate  risk  categories. 
Depending  on  the  sensitivity  of  the  in¬ 
formation  being  handled,  Nationwide 
might  ask  a  company  to  implement 
stronger  privacy  policies.  Each  compa¬ 
ny  also  needs  to  submit  to  regular  pri¬ 
vacy  audits. 

When  it  comes  to  partners  that 
are  based  offshore,  Nationwide  has 
instituted  “deeper  due  diligence  and 
security,”  Herath  says.  This  includes 
putting  Nationwide’s  own  security  per¬ 
sonnel  at  an  offshore  location  to  en¬ 
sure  that  “people  don’t  leave  with 
things  they  are  not  supposed  to  leave 
with,”  he  says. 

This  level  of  physical  security  is  es¬ 
pecially  a  concern  at  a  time  when  tech¬ 
nology  has  made  it  possible  for  users 
to  store  vast  amounts  of  data  as  stor¬ 
age  devices  get  smaller,  Herath  says.  “A 
few  years  ago,  you  would  need  a  truck 
to  take  it  away.  Today,  all  a  user  needs 
is  a  key  fob,”  he  says.  ©  45101 


THE  POWER  OF  PRIVACY 

Legal  requirements  and  corporations'  concerns  about 
their  reputations  are  pushing  the  need  for  holistic 
privacy  programs,  users  say: 

QuickLink  41835 

Test  your  knowledge:  How  well  do  you  know  the 
rules  regarding  responsible  information  handling?  Take 
our  online  quiz  to  find  out: 

QuickLink  45268 
www.computerworld.com 


The  Mosaic  Effect 


DATA  ELEMENTS  that  in  isolation 
look  relatively  innocuous  can  amount 
to  a  privacy  breach  when  combined, 
warns  Elizabeth  Gorgue,  privacy  officer 
at  the  e-Government  Office  at  the 
County  of  Santa  Clara,  Calif. 

In  the  intelligence  community,  that’s 
known  as  the  “mosaic  effect”  -  when 
combinations  of  data  tidbits  produce  a 
picture  that  wasn’t  apparent  from  the 
individual  pieces. 

As  the  delivery  arm  of  a  number  of 
state  and  federal  programs,  the  county 
collects  and  maintains  an  enormous 
amount  of  data  on  individuals,  including 


information  about  their  medical  and 
mental  health  histories,  criminal 
records,  demographic  profiles  and  wel¬ 
fare  benefits.  “The  kind  of  information 
we  gather  and  maintain  leads  us  to  be 
especially  concerned  about  privacy," 
says  Satish  Ajmani,  the  county’s  CIO. 

To  ensure  better  privacy  protection, 
the  county  has  launched  a  major  data 
classification  project.  Its  goal  is  to  lo¬ 
cate  and  classify  every  bit  of  confiden¬ 
tial  information  it  manages  in  order  to 
get  a  better  handle  on  what's  critical  to 
privacy  and  what’s  not,  Ajmani  says. 

-  Jaikumar  Vijayan 
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KNOWLEDGE  CENTER  PRIVACY 


How  do  you  protect  sensitive  data  when  it’s 
in  the  hands  of  a  third  party?  By  Stacy  Collett 


woman  in  Pakistan  re¬ 
cently  struck  fear  among 
IT  executives  who  out¬ 
source.  She  had  obtained 
sensitive  patient  docu¬ 
ments  from  the  Universi¬ 
ty  of  California,  San  Fran¬ 
cisco,  Medical  Center  through  a  med¬ 
ical  transcription  subcontractor  that 
she  worked  for,  and  she  threatened  to 
post  the  files  on  the  Internet  unless 
she  was  paid  more  money. 

The  story  didn’t  sit  well  with  John 
Golden,  CIO  at  CNA  Financial  Corp., 
a  $12.3  billion  insurance  company  in 
Chicago  that  outsources  a  small  por¬ 
tion  of  its  billing  functions  to  India. 
Golden’s  team  implemented  a  slew  of 
physical,  technical  and  contractual  se¬ 
curity  precautions  to  protect  customer 
data,  such  as  sending  only  necessary 
bits  of  customer  information,  backing 
up  files  in  a  centralized  server  at  the 
home  office  and  putting  tough  restric¬ 
tions  on  employee  turnover  at  the  out¬ 
sourcing  facility.  But  there’s  always  a 
horror  story  to  make  him  wonder. 

“I  wish  I  could  say  we  have  the  secu¬ 
rity  issue  licked,”  Golden  says.  “We 
haven’t  had  any  security  breaches  to 
our  knowledge  in  this  space”  since 
CNA  began  outsourcing  its  billing 


function  a  year  ago.  But  with  the  grow¬ 
ing  number  of  sophisticated  hackers, 
terrorist  threats  and  old-fashioned 
opportunists,  the  threat  of  a  security 
breach  looms  daily. 

The  outsourcing  train  has  left  the 
station  with  many  top  financial,  health 
care,  tax  reporting  and  credit  reporting 
companies  on  board.  The  business 


Howto  Keep 
Data  Safe 


■  Visit  the  outsourcing  site. 

■  Require  the  outsourcing  vendor  to 
provide  proof  of  a  security  audit  by  a 
reputable  third  party  or  industry  group. 

■  Conduct  a  remote  vulnerability  scan 
to  determine  what  internal  information 
you  can  access  from  the  outside. 

■  Provide  only  partial  information  about 
a  customer  -  not  the  full  profile. 

■  Put  subcontracting  limits  into  the 
contract. 

■  Make  sure  the  contract  includes  a  lim¬ 
it  on  employee  turnover  at  the  out¬ 
sourcer. 

■  Ask  the  outsourcing  vendor  to  provide 
a  paperless  clean-room  environment. 

■  Keep  the  centralized  database  at  your 
home  site,  not  overseas. 


process  outsourcing  market  in  India 
alone  is  expected  to  grow  54%  to 
$3.6  billion  by  the  end  of  this  quarter, 
according  to  the  National  Association 
of  Software  and  Services  Companies, 
a  New  Delhi-based  organization  made 
up  of  800  Indian  IT  and  outsourcing 
companies. 

Industry  observers  warn  that  if  out¬ 
sourcing  isn’t  done  thoughtfully,  with 
proper  security  controls  beyond  the 
encrypted  domain  level,  companies 
will  have  their  own  horror  stories  to 
tell.  Here  are  their  tips  on  controlling 
data  that’s  in  the  hands  of  a  third  party: 

Ask  to  See  a  Security  Audit 

“If  you’re  handling  financial  data  or 
health  data,  you  are  required  by  law  to 
have  an  information  security  plan  that 
has  administrative,  technical  and  phys¬ 
ical  steps  taken  to  safeguard  the  data 
—  even  less  sensitive  customer  con¬ 
sumer  data,”  says  Becky  Burr,  an  attor¬ 
ney  and  member  of  the  International 
Association  of  Privacy  Professionals 
in  Philadelphia. 

Though  the  requirement  is  broad 
and  doesn’t  point  to  one  particular 
standard,  Kelly  Kavanagh,  an  analyst  at 
Gartner  Inc.,  says  outsourcing  vendors 
should  provide  evidence  that  they 
have  undergone  a  security  audit  by  a 
reputable  third  party,  such  as  a  Big 
Four  accounting  firm. 

Audits  using  standards  provided  by 
a  government  agency  such  as  the  Na¬ 
tional  Institute  of  Standards  and  Tech¬ 
nology  or  a  Statement  of  Auditing 
Standards  70  form  also  provide  protec¬ 
tion.  But  many  outsourcing  firms  balk 
at  the  high  cost  of  those  audits  —  some 
run  to  six  figures  —  and  choose  less 
expensive  documentation. 

Some  outsourcing  vendors  conduct 
audits  against  vertical  industry  stan¬ 
dards.  Health  care  companies  should 
see  an  audit  related  to  Health  Insur¬ 
ance  Portability  and  Accountability 
Act  (HIPAA)  regulations.  CIOs  in  the 
financial  services  industry  can  look  for 
audit  guidelines  under  the  Gramm- 
Leach-Bliley  Act. 

Set  Up  a  Clean  Room 

Some  facilities  handling  sensitive  data 
require  a  clean-room  environment  to 
keep  information  from  literally  walk¬ 
ing  out  the  door. 

Peter  Bendor-Samuel,  CEO  of  The 
Everest  Group,  an  outsourcing  consult¬ 
ing  firm  in  Dallas,  describes  a  standard 
clean  room:  “All  the  machines  and  out¬ 
put  devices  except  for  terminals  are 
disabled.  You  can’t  copy,  can’t  use  a 
hard  drive  or  a  PDA  to  get  information 
out  of  there.  Their  servers  reside  back 


in  the  U.S.  So  there’s  no  way  to  get 
data  out  of  there.” 

What’s  more,  employees  are  physi¬ 
cally  searched  when  entering  and  leav¬ 
ing.  “These  are  extraordinary  precau¬ 
tions,”  says  Bendor-Samuel,  and  they 

might  not  be  for  every  company. 

% 

Limit  Access  to  Data 

At  CNA,  all  workers  enter  the  central¬ 
ized  server  through  CNA’s  intranet, 
where  they  can  also  view  links  to 
CNA’s  methods  and  procedures  and  to 
the  company’s  chat  site.  To  handle  its 
growing  outsourcing  needs,  CNA  in 
April  will  roll  out  a  companywide  por¬ 
tal  that  will  restrict  access  based  on 
user  identity.  A  customized  screen  will 
pop  up  at  the  outsourcing  facility  with 
only  a  few  options. 

Once  offshore  workers  have  access 
to  the  server,  CNA  limits  the  amount 
of  client  information  they  can  see.  “If 
we’re  trying  to  verify  that  a  customer 
is  a  good  credit  risk,  we  don’t  have  to 
send  all  parts  of  the  application,  just 
[those]  required  to  approve  the  appli¬ 
cation,”  Golden  says. 

Know  Your  Workers 

No  matter  how  many  safety  precau¬ 
tions  are  taken,  it’s  hard  to  stop  the  op¬ 
portunist  who  steals  data  for  money  or 
revenge.  James  “Zeke”  Zoccoli,  CIO  at 
LifeCare  Management  Services  LLC, 
says  the  best  way  to  keep  his  compa¬ 
ny’s  outsourced  medical  transcription 
records  safe  is  to  know  the  outsourc¬ 
ing  workers  and  make  sure  they’re 
trained  properly  about  procedures  and 
legal  consequences. 

“We  do  that  through  training,  agree¬ 
ments  and  contracts,”  says  Zoccoli. 
LifeCare,  a  Plano,  Texas-based  opera¬ 
tor  of  20  long-term-care  hospitals  in 
nine  states,  outsources  400,000  lines 
of  medical  transcription  data  each 
month  to  Affiliated  Computer  Services 
Inc.  in  Dallas.  Transcriptionists  have 
HIPAA  training  and  know  the  rules 
and  regulations  required  to  maintain 
compliance  with  privacy  standards. 

Zoccoli  and  Golden  also  recommend 
sending  people  to  visit  outsourcing 
sites  regularly  to  meet  employees  and 
monitor  employee  turnover  and  sub¬ 
contracting  activities.  ©  44721 


Collett  is  a  freelance  writer  in  Chicago. 
Contact  her  at  stcollett@aol.com. 


PRIVACY  PERILS 


Outsourcing  jobs  to  offshore  destinations  can  sharply 
increase  data  privacy  risks  and  the  complexity  of 
managing  that  risk,  experts  say: 
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KNOWLEDGE  CENTER  PRIVACY 


All  the  rage  in  the  boom 
years,  chief  privacy  officers 
lost  traction  with  the  down¬ 
turn.  New  privacy  regula¬ 
tions  are  restoring  their 
clout.  Bv  Steve  Ulfelder 


IN  1999  and  2000,  a  new  title  made  its  way  into 
many  executive  suites:  chief  privacy  officer.  Re¬ 
action  was  mixed.  Some  CIOs  and  analysts  wel¬ 
comed  the  concept  of  a  corporate  privacy  czar, 
while  skeptics  viewed  the  CPO  boomlet  as  pub¬ 
lic  relations  gloss  whose  sole  function  was  to 
assuage  consumers’  privacy  fears. 

The  economic  downturn  of  2000-03  brought  the 
CPO  trend  to  an  inglorious  halt.  “Over  the  last  few 
years,  the  economy  made  it  hard  to  bring  in  people 
except  in  industries  where  CPOs  were  mandated,” 
says  Herman  Collins,  CEO  of  Privacy  Leaders,  a  Las 


Vegas-based  executive  search  firm  that  focuses  on 
privacy  professionals. 

But  the  worm  has  turned.  The  economy  is  percolat¬ 
ing,  hiring  bans  are  easing  —  and  U.S.  companies  face 
an  imposing  array  of  privacy-related  regulations,  in¬ 
cluding  the  Health  Insurance  Portability  and  Account¬ 
ability  Act  (HIPAA)  and  the  Gramm-Leach-Bliley  Act. 

Against  this  changing  backdrop,  it’s  time  to  check 
in  on  the  status  of  CPOs. 

Regulatory  Surprise 

According  to  corporate  privacy  experts,  federal  regu¬ 
lations  such  as  HIPAA,  the  Sarbanes-Oxley  Act,  the 
Fair  Credit  Reporting  Act  and  Gramm-Leach-Bliley 
are  affecting  enterprises  in  significant,  but  perhaps 
counterintuitive,  ways.  Far  from  creating  a  second 
CPO  boom,  these  regulations  may  actually  be  split¬ 
ting  privacy  measures  between  two  camps: 

■  Those  in  the  “CPO  Classic”  camp  advocate  hir¬ 
ing  genuine  corporate  officers  charged  with  proac¬ 
tively  considering  the  ethical,  competitive  and  strate¬ 
gic  implications  of  privacy. 

■  The  “Compliance  Is  King”  camp  is 
narrowly  focused  on  meeting  the  letter 
of  the  various  federal,  industry  and 
state  privacy  regulations. 

There  is  widespread  agreement,  es¬ 
pecially  among  disappointed  CPO 
Classic  advocates,  that  the  explosion 
of  privacy  regulations,  combined  with 
limited  resources,  has  produced  heavy 
emphasis  on  compliance.  “Most  compa¬ 
nies  have  shifted  from  a  privacy  ap¬ 
proach  that  would  be  based  on  pro¬ 
active  steps,  competitive-edge  orienta¬ 
tion  and  customer  trust  building  to  a 
narrow  legal-compliance  priority,” 
says  Alan  R  Westin,  president  of  the 
Hackensack,  N.J.-based  nonprofit  orga¬ 
nization  Privacy  &  American  Business. 

“This  shifts  power  to  the  legal  folks  . . . 
and  away  from  CPOs,  and  it  also  leads 
companies  to  spend  tight  dollars  on 
outside  legal  counsel,  again,  for  narrow 
law  compliance.” 

Richard  Purcell,  CEO  of  Corporate 
Privacy  Group,  a  Seattle  consulting  firm,  agrees.  Pur¬ 
cell  pushed  for  creation  of  the  CPO  position  at  Mi¬ 
crosoft  Corp.  and  served  as  that  vendor’s  first  CPO 
from  2000  until  early  2003. 

“Unfortunately,  the  response  to  [regulations  like] 
HIPAA  has  been  to  make  privacy  officer  a  compli¬ 
ance  job,  not  proactive  or  strategic,”  Purcell  says.  “I’d 
argue  that  that’s  in  conflict  with  the  initial  focus, 
which  was  more  entrepreneurial.” 

A  perfect  example  of  compliance-driven  privacy 
measures  is  the  HIPAA  mandate  that  any  health-care- 
related  business  name  a  privacy  officer.  That  includes 
major  hospital  chains,  but  also  “a  seven-person  den¬ 
tal  office,”  Purcell  says.  Thus  the  roster  of  CPOs  is 
growing  (see  chart),  but  it’s  hard  to  see  how  the  new 
title  —  which  in  thousands  of  small  medical  offices  is 
likely  to  be  awarded  to  an  already  overworked  assis¬ 
tant  —  will  advance  the  cause. 

Membership  in  the  leading  CPO  group,  the  Phila¬ 
delphia-based  International  Association  of  Privacy 
Professionals,  is  about  1,000.  Because  of  mergers 


among  privacy  groups,  apples-to-apples  comparisons 
are  difficult  to  come  by,  but  Westin  says  the  growth 
in  strategic  CPOs  plateaued  in  2001;  he  believes  that 
there  are  about  2,000  CPOs  in  the  U.S.  but  that  most 
of  those  are  sops  to  HIPAA  compliance. 

Still,  the  CPO  field  isn’t  without  heavy  hitters:  Pri¬ 
vacy  Leadership  Group,  part  of  Privacy  &  American 
Business,  is  composed  of  16  CPO  Classics  —  Westin 
calls  them  “strategically  oriented  CPOs”  —  from  or¬ 
ganizations  such  as  Citigroup  Inc.,  American  Express 
Co.,  Bank  of  America  Corp.,  the  U.S.  Postal  Service, 
Nationwide  Mutual  Insurance  Co.,  Equifax  Inc., 
Hewlett-Packard  Co.  and  Microsoft.  Nearly  all  of 
these  enterprises  have  had  CPOs  since  2001. 

Clout  Is  Critical 

In  the  Information  Age,  it  seems  clear  that  the  rela¬ 
tionship  between  a  CPO  and  his  employer’s  IT  orga¬ 
nization  is  critical.  The  Ponemon  Institute  LLC,  a 
Tucson,  Ariz.,  think  tank  focused  on  corporate  priva¬ 
cy  issues,  recently  surveyed  64  companies  that  have 
CPOs.  According  to  institute  Chair¬ 
man  Larry  Ponemon,  companies 
whose  “CPO  has  at  least  a  dotted-line 
relationship  to  the  CIO  tend  to  have 
more  effective  privacy  programs.” 

The  key  reason,  Ponemon  adds,  is 
that  privacy  is  so  tied  into  IT  func¬ 
tions  that  even  the  best  privacy  poli¬ 
cies  are  fruitless  unless  they  can  be 
implemented  —  reliably  and  repeat- 
ably  —  by  the  IT  group.  Indeed,  West¬ 
in  says,  “Many  of  the  hard  issues  fac¬ 
ing  companies  are  shifting  also  to 
CIOs.  Their  systems  must  track  opts, 
do-not-call  lists,  etc.,  and  must  try  to 
develop  more  secure  customer  and 
consumer  identification  —  especially 
to  control  ID  theft.” 

Former  CPOs  and  privacy  experts 
say  this  relationship  varies  widely 
from  company  to  company,  relying  al¬ 
most  totally  on  the  CPO’s  background : 
and  personality. 

“I’d  call  those  relationships  ‘intense¬ 
ly  variant,’  ”  says  former  Microsoft 
CPO  Purcell.  “People  in  IT  have  titles  and  creden¬ 
tials  that  are  provable. . . .  They  often  have  a  hard 
time  with  a  privacy  person  because  there’s  no  objec¬ 
tive  credentials.  A  CPO  could  be  from  legal,  compli¬ 
ance,  HR,  anything.”  Partly  because  of  this  discon¬ 
nect,  many  CIOs  are  unsure  of  their  role,  “unless  a 
smart  CPO  creates  a  working  committee  that  brings 
the  CIO  into  a  privacy  task  force,”  Westin  says. 

One  thing  seems  clear:  As  Westin  says,  regardless 
of  the  future  of  the  CPO,  “in  smart  companies,  CIOs 
are  front  and  center”  where  privacy  is  concerned. 
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CPOs  on  the  Rise? 


Late  2000: 67  chief  privacy 
officers  attend  the  first 
meeting  of  the  Association  of 
Corporate  Privacy  Officers. 

2001:  At  least  100  busi¬ 
nesses  employ  CPOs,  ac¬ 
cording  to  Alan  F.  Westin, 
president  of  nonprofit  Priva¬ 
cy  &  American  Business. 

2003:  The  two  largest  CPO 
organizations  merge  to  form 
the  International  Associa¬ 
tion  of  Privacy  Profession¬ 
als,  which  claims  member¬ 
ship  of  more  than  1,000. 

2004:  Westin  estimates  the 
number  of  U.S.  CPOs  at 
2,000  but  says  most  are 
narrowly  focused  on  com¬ 
pliance  issues. 
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INFORMATION 
LIFECYCLE 
MANAGEMENT  IS: 

a  strategy  that  uses 
people,  processes  and 
technology  to  store  and 
tap  critical  business 
data  throughout  its 
lifespan  of  value. 


IN  THIS  EDITION: 

See  how  companies  are 
turning  their  new  regu¬ 
latory  challenges  into 
business  opportunities 
by  leveraging  the  bene¬ 
fits  of  Information 
Lifecycle  Management. 


Information  Lifecycle  Management: 
The  Smart  Way  to  Save  Money 


CERTAINLY,  SMART  COMPANIES 

recognize  that  information  is  the  linch¬ 
pin  of  their  success.  In  most  organiza¬ 
tions,  corporate  information  is  their 
most  valuable  asset,  the  key  ingredient 
with  which  innovative  new  business 
models  are  built. 

“The  ability  to  use  and  leverage 
information  as  a  company  to  drive 
additional  business  is  critical,”  says 
Mark  Lewis,  chief  technology  officer 
at  EMC  in  Hopkinton,  Mass.  “For 
many  companies,  smart  use  of  infor¬ 
mation  has  truly  become  a  differen¬ 
tiator,  particularly  as  technology  pro¬ 
vides  companywide  access.” 

But  if  innovative  information  man¬ 
agement  is  the  ultimate  goal,  then  the 
immovable  object  squarely  in  its  path 


is  the  reality  of  today’s  lean  IT  budgets. 
Technology  is  the  vital  framework  on 
which  companies  rely  to  help  business 
information  flow  freely,  but  many 
worthy  efforts  have  been  hamstrung 
by  the  flat  or  declining  budgets  of  the 
past  several  years. 

Yet  limited  resources  are  no 
excuse  for  limited  action,  says  Chuck 
Hollis,  vice  president  of  platforms 
marketing  at  EMC.  “More  and  more 
companies  are  realizing  that  informa¬ 
tion  is  money,  and  they  have  to  do  a 
better  job  of  managing  their  money,” 
he  says.  “But  all  this  is  happening  as 
IT  budgets  are  flat  and  labor  costs 
are  growing.” 

Spurred  by  boardroom-level  con¬ 
cerns  about  the  escalating  costs  of 
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OPER  ATIONA 
EFFICIENCY 


“Our 

business  was 
able  to  cut 
support 
staffing  by  30 
percent,  yet 
increase  its 
throughput 
by  20 
percent. 
[ILM]  had  a 
significant 
bottom  line 
impact  and  a 
net  delta  of 
somewhere 
around 
10  percent 
in  our 

profitability, 
directly 
attributable 
to  this 
planned 
technology.” 

— Bob  Terdeman, 
Rogers  Medical 
Intelligence 


technology,  IT  executives  have  embarked 
on  a  constant  search  to  make  their  infra¬ 
structure  as  streamlined  and  cost-efficient 
as  possible. 

Many  have  already  implemented  meas¬ 
ures  that  address  cost-cutting  on  a  piece¬ 
meal  basis — server  consolidation  or  out¬ 
sourcing,  for  example — but  also  need 
a  method  of  reducing  infrastructure 
and  information  management  costs 
enterprise-wide.  One  intriguing  answer: 
Information  Lifecycle  Management  (ILM), 
which  offers  an  opportunity  to  streamline 
infrastructure  costs  across  the  board  by 
tying  the  business  value  of  information  to 
the  cost  of  managing  it. 

“If  you  think  of  information  bits  as 
assets,  Information  Lifecycle  Management  is 
the  alignment  between  the  value  of  informa¬ 
tion  and  how  much  a  company  is  spending 
to  make  it  available  to  people,”  says  Hollis. 

Information  Lifecycle  Management  can 
help  streamline  operational  costs.  New 
York’s  Rogers  Medical  Intelligence 
Solutions  has  recognized  significant  cost 
savings  through  Information  Lifecycle 
Management,  according  to  Robert 
Terdeman,  the  company’s  vice  president 
and  chief  information  architect.  “One  of 
the  key  results  is  that  our  business  was  able 
to  cut  support  staffing  by  30  percent  yet 
increase  its  throughput  by  20  percent,” 
says  Terdeman.  “It  had  a  significant  bot¬ 
tom  line  impact  and  a  net  delta  of  some¬ 
where  around  10  percent  in  our  prof¬ 
itability,  directly  attributable  to  this 
planned  technology.” 

TECHNOLOGY  OPERATIONAL 
EFFICIENCY:  BUSINESS  DRIVERS 

Much  has  changed  over  the  past  several 
years  for  companies  that  rely  on  online 
information  for  strategic  value.  Consider: 

Budget  Constraints.  While  CIO  maga¬ 
zine’s  latest  quarterly  Tech  Poll  forecasts  a 
modest  increase  in  IT  budgets  for  2004, 
caution  is  still  the  watchword.  Nearly  one- 
third  of  survey  respondents  say  that  ongo¬ 
ing  financial  constraints  affect  IT  spending, 
while  nearly  60  percent  say  that  spending 


OPERATIONAL  EFFICIENCY: 
BUSINESS  DRIVERS 


•  Budget  Constraints 

•  Explosive  Information  Growth 

•  Manual  Processes 

•  Fragmented  Management  Strategies 

•  Regulatory  Compliance  Issues 


on  computer  hardware  will  remain  flat  or 
decrease. 

Explosive  Information  Growth. 

Companies  are  squirreling  away  unprece¬ 
dented  quantities  of  data  in  many  forms — 
the  structured  information  that  lies  in  data¬ 
bases  as  well  as  the  unstructured,  file-based 
information  that  lies  in  Word  and  Excel 
documents  across  a  network. 

“Information  is  growing  at  a  ridiculous 
rate,”  says  Steve  Kenniston,  a  technology 
analyst  at  Enterprise  Storage  Group,  a 
research  company  based  in  Milford,  Mass. 
“Where  there  used  to  be  one  storage 
administrator  for  one  terabyte  of  data,  now 
they  need  one  administrator  to  manage  six 
terabytes,  and  soon  it’ll  be  one  for  every  14 
terabytes.  For  that  to  happen,  companies 
need  to  make  information  management 
more  efficient.” 

Manual  Processes.  “Categorizing, 
moving  and  disposition  of  data  is  still  a 
very  manual  process  at  most  companies,” 
says  Hollis.  “Tools  are  few  and  frag¬ 
mented,  and  a  far  cry  from  the  automat¬ 
ed  determination  of  policy.”  Worse,  man¬ 
ual  information  management  consumes 
staff  time — and  as  Hollis  points  out, 
“Labor  is  the  most  expensive  component 
of  IT  today.  “ 

Fragmented  Management  Strategies. 
Gaining  a  bird’s-eye  view  of  all  that  infor¬ 
mation  is  no  small  task.  Without  a  compre¬ 
hensive  strategy,  it’s  difficult  for  companies 
to  manage  the  data  that’s  spread  across  an 
entire  enterprise. 

Regulatory  Compliance  Issues.  New 
regulations  and  corporate  governance 
mandates  for  the  storage  and  management 
of  information  mean  that  companies  must 
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be  able  to  retrieve  data  quickly  and  on 
demand.  Faced  with  the  difficult  and  time- 
consuming  task  of  accessing  data  that  may 
well  be  spread  across  a  variety  of 
sources — or  that  may  have  been  deleted — 
it’s  small  wonder  that  companies  can  be 
frightened  into  taking  a  “save  it  all” 
approach. 

These  issues  are  prompting  CIOs  to  rec¬ 
ognize  that  the  real  opportunity  to  drive 
big  costs  out  of  IT  is  to  look  across  the 
entire  lifecycle  of  the  information  and  the 
infrastructures  that  support  it.  In  short, 
Information  Lifecycle  Management. 

As  detailed  in  earlier  parts  of  this 
series,  Information  Lifecycle  Manage¬ 
ment  is  not  a  product  but  rather  a 
method  of  harnessing  informational 
chaos.  “[It]  is  a  strategy,  and  one  that 
encompasses  people,  processes  and  tech¬ 
nology,”  says  Kenniston.  Done  right, 
ILM  is  proactive  and  dynamic,  and 


INFORMATION  LIFECYCLE 
MANAGEMENT  ENABLES 
OPERATIONAL  EFFICIENCY 


•  Improve  Classification 

•  Leverage  Existing  Assets 

•  Enable  Policy  Automation 

•  Tier  Storage 

•  Decrease  Compliance  Costs 

•  Stretch  IT  Resources 


helps  companies  plan  IT  growth  to  meet 
their  anticipated  business  needs. 
“[Information  Lifecycle  Management]  is 
the  ability  to  provide  companies  with 
access  to  information — the  right  infor¬ 
mation — and  the  most  up-to-date  and 
logical  version  across  the  enterprise,” 
says  Tanuja  Randery,  vice  president  for 
global  strategic  initiatives  at  EMC.  “If 
companies  want  to  access  and  use  infor¬ 
mation  to  their  business  advantage,  ILM 
enables  this  by  providing  a  unified 
approach  to  viewing  and  access  while 
ensuring  that  the  cost  and  performance 
of  the  infrastructure  is  optimized.” 


LINKING  INFORMATION  LIFECYCLE 
MANAGEMENT  AND  OPERATIONAL 
EFFICIENCY 

Implementing  Information  Lifecycle 
Management  can  help  companies  manage 
information  both  more  wisely  and  less 
expensively.  By  building  an  information 
management  strategy  based  on  this  disci¬ 
pline,  companies  can  build  cost  savings  into 
their  infrastructure  in  a  holistic  fashion. 
Information  Lifecycle  Management  Helps: 

•  Improve  Classification.  Many  compa¬ 
nies  don’t  even  know  what  they  have  for 
equipment.  Information  Lifecycle 
Management,  which  starts  with  a  thor¬ 
ough  inventory  of  physical  and  informa¬ 
tional  assets,  ensures  that  companies 
know  exactly  what  they  have,  which 
helps  them  make  better-informed  spend¬ 
ing  decisions.  By  conducting  a  data  clas¬ 
sification  and  prioritization  study,  com¬ 
panies  can  ensure  that  data  is  placed  on 
the  level  of  storage  most  appropriate  to 
its  business  value.  Many  times,  that 
means  calling  in  outside  experts. 
“Information  Lifecycle  Management 
consultants  are  part  of  the  storage  com¬ 
panies’  bench  teams,”  says  Pete  Gerr,  an 
analyst  at  Enterprise  Storage  Group. 
“They  have  the  services  and  tools  that 
will  help  an  organization  classify  and 
value  their  data,  taking  a  step  toward 
having  a  fully  realized  strategy.” 

•  Leverage  Existing  Assets.  Once  compa¬ 
nies  know  exactly  what’s  there,  they  can 
better  prioritize  information  assets  in 
accordance  with  information  manage¬ 
ment  policies.  “If  you  know  up  front 
what  you  have  and  how  much  data  is 
being  created,  you’ll  do  better  capacity 
planning,”  says  Kenniston. 

•  Enable  Policy  Automation.  The  ability 
to  simplify  and  automate  technical 
infrastructure  through  Inform¬ 
ation  Lifecycle  Management  means 
that  companies  can  lower  business 
costs  and  hire  fewer  people.  “You  get 
efficiencies  by  automating  the  things  that 
people  have  to  do  today,”  Hollis  explains. 
By  creating  and  then  automating  policies 


“Information 
is  growing  at 
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IMPACT  OF  ILM  AND  TCO  SAVINGS  ACROSS  STAGES 

Three-Year  TCO  Estimate  for  Typical  Large  Enterprise*  (Indexed  to  100) 
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64-66 
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52-54 

Step  2  Step  3 


Incremental  TCO  Reduction  10-17%  23-26%  17-20% 


Drivers  of  Reduction 
with  step  implementation 

'Enterprise  has  750  TB  of 
baseline  total  storage;  TCO 
calculation  includes  busi¬ 
ness  costs  (i.e.,  data  loss, 
compliance,  downtime,  and 
data  search  time) 


•  Networked  •  Application-specific  •  Automated 

storage  service  level  align-  management 

•  Storage  ment  (based  on  and  control 

automation  business  policies)  •  Service  levels 

•Storage  •  Improved  continuity  aligned  across 
consolidation  and  compliance  enterprise  data 

SOURCE:  EMC 


QUESTIONS  ABOUT 
INFORMATION 
LIFECYCLE 
MANAGEMENT? 

If  you’ve  got  any  burning 

questions  about 

Information  Lifecycle 

Management — and  how 

you  can  begin 

implementing  such  a 

strategy — send  them  to 

ilm  questions@emc.com. 

We’ll  answer  the  most 

frequently  asked 

questions  later  in 

this  series. 


to  drive  information  management,  com¬ 
panies  can  streamline  operations  and  cut 
costs.  “The  principal  savings  is  around 
the  dynamic  movement  of  data,”  says 
EMC’s  Lewis.  “The  value  of  data  changes 
over  time,  and  ILM  helps  flexibly  move 
data  to  the  appropriate  level  of  storage  as 
its  business  value  changes.” 

•  Tier  Storage.  Classifying  data  enables  IS 
executives  to  create  tiered  storage  that 
matches  the  business  value  of  the  data 
with  the  corresponding  price/perform¬ 
ance  layer  of  storage.  For  example,  mis¬ 
sion-critical  applications  might  reside  on 
high-performance  disks,  while  important 
but  less  critical  data  land  on  less  costly 
ATA  disks.  “Having  high-end,  mid-tier 
and  archive  storage  makes  a  lot  of  sense 
financially  and  from  a  recoverability 
standpoint,”  says  Kenniston.  “By  migrat¬ 
ing  the  lower  class  of  information  to  a 
second  tier  of  storage,  companies  save 
money  but  also  keep  it  available  and  pro¬ 
tect  it  more  easily.”  As  the  range  of 
options  in  tiered  storage  increases,  so  do 
the  effective  business  continuity  options 
for  the  corporate  world. 

•  Decrease  Compliance  Costs.  Information 
Lifecycle  Management  handles  data 
according  to  its  business  value  at  a  very 
granular  level,  so  CIOs  know  what  data 
should  be  kept  and  what  can  be  deleted, 


thus  saving  money.  It  also  makes  compli¬ 
ance  much  simpler,  so  companies  are  less 
likely  to  incur  compliance-related  expens¬ 
es  such  as  legal  fees  or  staffing  costs. 

•  Stretch  IT  Resources.  Automating  infor¬ 
mation  management  in  accordance  with 
data  policies  means  that  CIOs  will  be  able 
to  redeploy  existing  staffers  to  other  proj¬ 
ects,  making  their  resources  go  further  for 
the  same  money.  “If  companies  can  auto¬ 
mate  the  process  and  take  the  human 
aspect  out  of  it,  it  saves  them  money,” 
says  Kenniston.  “Once  CIOs  are  con¬ 
vinced  that  storage  can  be  automatically 
moved  to  the  right  asset  when  they  want 
to  move  it,  automation  is  the  next  step.” 
In  an  era  of  increasing  concern  over  the 
cost  of  technology,  CIOs  see  the  wisdom  of 
embracing  budget  reduction  strategies  that 
add  value  as  well  as  cut  costs.  One  impor¬ 
tant  step  is  to  implement  a  strategy  that 
works  across  the  entire  company  to  man¬ 
age  information  holistically. 

“By  implementing  Information  Lifecycle 
Management,  we  believe  that  CIOs  can 
expect  to  see  a  net  of  up  to  50  percent  actu¬ 
al  cost  savings  in  overall  storage  costs,” 
says  EMC’s  Lewis.  Companies  can  make 
sure  that  they  drive  all  possible  extra  costs 
out  of  managing  and  storing  information— 
and  at  the  same  time,  truly  give  business 
leaders  what  they  need  to  thrive. 

“If  you  recognize  that  information  is  a 
core  company  asset  similar  to  physical 
plant  and  human  resources,  then  you 
really  understand  the  value  of  an  inte¬ 
grated  storage  solution,”  says  Terdeman. 
“Because  what  you’re  really  storing  are 
critical  company  assets  in  a  managed  and 
efficient  way.” 

NEXT:  In  the  next  part  of  this  series, 
we'll  look  at  Information  Lifecycle 
Management  for  small  to  medium-sized 
enterprises  (SMEs). 

FOR  MORE  INFORMATION 

where  information  lives  Visit  WWW.6mC.C0m/ilm 

for  an  in-depth  look  at  Information  Lifecycle 
Management  products,  services  and  strategies. 
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To  help  the  reader 

sort  through  the  bar¬ 
rage  of  terms  thrown 
around  in  the  privacy 
debate,  here’s  a  glos¬ 
sary  that  we’ve  divided  into 
two  sections:  commonly  un¬ 
derstood  notions,  and  related 
technological  terms. 


Notions  of  Privacy 

Within  the  context  of  the  In¬ 
ternet,  the  right  to  privacy  is 
still  being  defined.  Generally, 
it  involves  a  person’s  right 
to  control  what  information 
about  himself  is  revealed  and 
to  whom,  as  well  as  what  oth¬ 
ers  may  do  with  that  informa¬ 
tion.  It’s  not  the  same  thing  as 
secrecy,  but  the  distinction  is 
sometimes  murky.  Privacy  isn’t 
an  absolute  right,  since  it’s  of¬ 
ten  trumped  by  laws  and  over¬ 
riding  social  needs.  For  exam¬ 
ple,  law  enforcement  officials 
may  obtain  warrants  that  allow 
them  to  intercept  communica¬ 
tions  or  search  physical  areas, 
activities  that  otherwise  would 
be  forbidden. 


ANONYMITY  There  are  times 
when  we’re  willing  to  supply 
personal  information,  provid¬ 
ed  it’s  not  connected  directly 
to  us.  When  we  respond  to  a 
survey,  for  example,  we  may 
feel  comfortable  about  reveal¬ 
ing  personal  information,  such 
as  income  and  lifestyle  choic¬ 
es,  because  we  believe  that 
our  answers  won’t  be  linked 
in  any  way  to  our  names  or 
other  identifying  information. 
And  there  are  other  times 
when  anonymity  can  be  desir¬ 
able  —  for  example,  when  re¬ 
porting  a  crime. 

Online,  we  can  use  an  Inter¬ 
net  site  called  a  remailer  that 
reposts  a  message  from  the 
site’s  own  address,  thus  con¬ 
cealing  the  originator  of  the 
message.  However,  remailers 
have  a  tarnished  image,  since 
many  spam  distributors  also 
use  remailers.  (See  also  anon¬ 
ymizer,  below.) 


CONFIDENTIALITY  Despite  the 
absence  of  legal  compulsions, 
most  of  us  expect  to  be  able  to 
hold  at  least  some  personal  in¬ 
formation  in  confidence,  and 
if  we  give  that  information  to 


Privacy  Glossary 


someone  —  such  as  when  fill¬ 
ing  out  a  loan  or  employment 
application  —  we  expect  the 
other  party  to  take  security 
measures  to  protect  that  infor¬ 
mation  and  not  to  share  it 
with  others. 


PRIVACY  IN  THE  LAW  The  Priva¬ 
cy  Act  of  1974  asserts  that  an 
agency  of  the  U.S.  government 
must  not  conceal  the  exis¬ 
tence  of  any  personal 
data  record-keeping 
system,  and  each 
agency  that  maintains 
such  a  system  must 
describe  publicly  both 
the  kinds  of  informa¬ 
tion  in  it  and  the  manner  in 
which  it  will  be  used.  The  law 
defines  eight  principles  on 
which  to  base  and  enforce  pri¬ 
vacy  policy:  openness,  individ¬ 
ual  access,  individual  partici¬ 
pation,  collection  limitation, 
use  limitation,  disclosure  limi¬ 
tation,  information  manage¬ 
ment  and  accountability. 


PSEUDONYMITY  This  concept 
originated  in  the  field  of  cryp¬ 
tography.  Pseudonymity  is  the 
ability  to  prove  a  consistent 
identity  without  revealing 
one’s  actual  name,  instead  us¬ 
ing  an  alias  or  pseudonym. 
Pseudonymity  combines  many 


of  the  advantages  of  both 
a  known  identity  and  anony¬ 
mity.  In  anonymity,  one’s  iden¬ 
tity  isn’t  known,  but  pseudo¬ 
nymity  creates  a  separate,  per¬ 
sistent  “virtual”  identity  that 
can’t  be  linked  to  a  specific 
person,  group  or  organization. 
Pseudonymous  remailers, 
called  “nym  servers,”  take 
messages  addressed  to  the 
pseudonym  and  resend  them 
to  the  pseudonym’s 
real  e-mail  address, 
and  they  can  also  for¬ 
ward  messages  to  oth¬ 
ers  as  though  they 
came  from  the  pseudo¬ 
nym’s  address  on  the 
server.  And  unlike  with  anony¬ 
mous  e-mail,  users  can  reply  to 
a  pseudonymous  sender,  and 
pseudonyms  can  establish  rep¬ 
utations  in  the  digital  world. 

Privacy-related  Terms 

ANONYMIZER  Sometimes  called 
a  Web  anonymizer,  this  privacy 
service  lets  a  user  visit  Web 
sites  while  preventing  those 
sites  from  gathering  informa¬ 
tion  about  the  user  (including 
IP  address,  browser  and  oper¬ 
ating  system  identification,  and 
cookie-stored  data)  or  which 
sites  he  has  visited.  Anonymiz¬ 
ers  usually  work  by  using  a 
proxy  server  to  process  HTTP 


requests.  When  the  user  clicks 
on  a  hyperlink  or  types  a  URL, 
the  anonymizing  server  inter¬ 
venes  and  gets  the  information 
for  the  user.  The  Web  site 
whose  page  is  being  requested 
gets  only  information  about 
the  anonymizer  server,  not  the 
user’s  computer.  An  anonymiz¬ 
er  makes  a  user  feel  that  his 
privacy  is  better  protected  on 
the  Internet,  but  it  also  pre¬ 
vents  personalization,  so  sites 
can’t  tailor  their  content  to  suit 
the  user,  and  he  may  have  to 
re-enter  personal  identification 
repeatedly  (such  as  when  mak¬ 
ing  purchases). 


OPT-IN/OPT-OUT  An  important 
distinction  in  the  privacy  de¬ 
bate  concerns  the  terms  under 
which  e-mail  marketers  (legiti¬ 
mate  ones,  not  spammers  that 
ignore  ethical  and  legal  con¬ 
cerns)  can  contact  users.  Opt- 
in  is  the  consumer-friendly  po¬ 
sition,  where  companies  can 
send  e-mail  only  to  people 
who  have  directly  given  their 
consent  for  such  communica¬ 
tions,  typically  by  signing  up 
at  a  Web  site.  Opt-out  is  the 
marketer-preferred  alternative 
under  which  marketers  can 
e-mail  to  anyone  who  hasn’t 
specifically  told  them  not  to. 
Unfortunately,  spammers  have 
used  opt-out  replies  as  a  way 
of  verifying  valid  e-mail  ad¬ 
dresses. 

The  Internet  Direct  Market¬ 
ing  Bureau  has  endorsed  opt- 
in  e-mail  as  the  best  practice 
for  its  marketer  members. 


PRIVACY  POLICY  Most  Web  sites 
have  a  page  describing  in  de¬ 
tail  the  site’s  privacy  practices 
and  what  the  site’s  owners  will 
do  with  any  information  they 
collect. 


P3P  Short  for  “Platform  for  Pri¬ 
vacy  Preferences  Project,”  this 
is  a  standard  XML  format 
adopted  by  the  World  Wide 
Web  Consortium  for  Web  sites 
to  use  to  encode  their  privacy 
policies  [see  QuickLink  33484]. 
P3P  recommends  practices 


that  will  let  users  define  and 
share  personal  information 
with  Web  sites  that  they  agree 
to  share  it  with.  Using  software 
that  adheres  to  the  P3P  recom¬ 
mendations,  users  can  create  a 
personal  profile  and  make  it 
(or  parts  of  it)  accessible  to  a 
Web  site  as  the  user  directs. 


RFID  Now  on  the  verge  of  be¬ 
coming  a  widespread  supply 
chain  tool,  radio  frequency 
identification  tags  are  getting 
smaller  and  cheaper,  and  pri¬ 
vacy  concerns  are  being 
raised.  It  may  not  be  long  be¬ 
fore  such  tags  are  built  into  in¬ 
dividual  items  (such  as  cloth¬ 
ing),  not  just  shipping  pallets, 
allowing  an  unprecedented 
amount  of  automated  moni¬ 
toring  of  people’s  habits,  be¬ 
haviors  and  locations. 


SPYWARE  Any  technology  that 
aids  in  gathering  information 
about  persons  or  organiza¬ 
tions  without  their  knowledge. 
On  the  Internet,  spyware  is 
programming  that’s  secretly 
installed  in  a  computer  to 
gather  information  about  the 
user  and  relay  it  to  advertisers 
or  other  interested  parties. 
Spyware  can  infiltrate  a  com¬ 
puter  as  a  virus  or  as  a  sur¬ 
prise  result  of  installing  a  new 
program.  Data-collecting  pro¬ 
grams  installed  with  the  user’s 
knowledge  aren’t  spyware  as 
long  as  the  user  fully  under¬ 
stands  what  data  is  being  col¬ 
lected  and  with  whom  it  will 
be  shared.  If  your  computer 
has  spyware  in  it,  be  aware 
that  you  have  a  “live”  server 
sending  information  about 
your  surfing  habits  to  a  re¬ 
mote  location.  045114 


Kay  is  a  Computerworld 
contributing  writer  in  Wor¬ 
cester,  Mass.  Contact  him  at 
russkay@charter.net. 


PRIVACY  RESOURCES 

For  a  listing  of  more  sources  of  information 
and  links  to  online  resources,  see: 

QuickLink  45111 
www.computerworld.com 

Are  there  technologies  or  issues  you'd  like 
to  learn  about  in  QuickStudy?  Send  your 
ideas  to  quickstudy@computerworld.com 

To  find  a  complete  archive  of  our 
QuickStudies,  go  online  to 

O  computerworld.com/quickstudies 


WEB  BEACONS 

Also  called  Web  bugs,  pixel  tags  or  clear  GIFs,  these  file 
objects  (typically  a  single  transparent  pixel  invisible  to  the 
user)  are  used  along  with  cookies  to  help  track  the  behav¬ 
ior  of  Web  site  visitors.  Users  can  set  their  browsers  to 
accept  or  decline  a  cookie,  but  a  Web  bug  always  arrives; 
it’s  just  another  graphic  on  the  page.  Turning  off  cookies 
will  prevent  tracking  your  specific  activity,  but 
the  Web  beacon  can  still  record  an 
anonymous  visit  through  your  IP 
address.  Web  beacons  are  typi¬ 
cally  used  by  a  third  party  to 
centralize  monitoring  from  a 
number  of  different  sites.  Web 
bugs  can  be  put  to  positive 
use,  such  as  to  track  copyright 
violations  on  the  Web. 
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children  through  its  online  registration 
process,  the  FTC  said. 

San  Luis  Obispo,  Calif. -based  Bonzi 
Software,  which  distributes  a  free  soft¬ 
ware  download  called  BonziBuddy, 
was  the  first  company  charged  for  pri¬ 
vacy  violations  over  a  download,  the 
FTC  said.  —  Scarlet  Pruitt,  IDG  News 
Service  ©  45098 


An  eclectic  collection  of  research 
and  resources.  By  Mitch  Betts 


Camera  Phones 

Today’s  camera  phones  could  be  used 
for  corporate  espionage  or  privacy  vio¬ 
lations.  Here  are  Gartner  Inc.’s  recom¬ 
mendations  for  a  corporate  policy: 


1 

Establish  a  clear  policy  but  not  an 
outright  ban. 

B 

■ 

Create  clearly  marked  secure  zones, 
where  all  photography  is  forbidden. 

3 

Ban  photography  of  items  that  are 
confidential  to  the  company. 

B 

Prohibit  taking  pictures  of  other 
people  without  their  permission. 

| 

Insist  that  no  photographs  be  taken 
in  places  where  personal  privacy  is 
expected. 

Research  Roundup 

■  Among  federal  government  agen¬ 
cies,  the  U.S.  Postal  Service  gets  the 
highest  “privacy  trust  score”  from  the 
general  public,  according  to  a  study  by 
Ponemon  Institute  LLC  and  the  CIO 
Institute.  The  CIA  and  the  Department 


of  Justice  got  low  marks  in  the  survey 
of  6,000  Americans. 

■  “Current  IP  telephony  products  and 
implementations  demonstrate  an 
alarming  lack  of  protective  security 
measures,  leaving  the  enterprise  open 
to  privacy  violation,  fraud  and  mali¬ 
cious  attacks,”  warns  Meta  Group  Inc. 

■  In  a  survey  of  948  people  who  were 
recently  hospitalized,  63%  of  the  re¬ 
spondents  said  they  support  the  idea 
of  having  a  complete,  computerized 
medical  record  that  could  be  accessed 
anywhere  in  the  hospital.  But  58%  said 
they’re  concerned  about  the  privacy  of 
their  records.  The  survey  was  commis¬ 
sioned  by  Siemens  Medical  Solutions 
in  Malvern,  Pa. 


Bell  Labs  Software 
Hides  Wireless  Users 

People  who  don’t  want  their  wireless 
carriers  to  keep  track  of  their  where¬ 
abouts  and  send  unsolicited  messages 
can  gain  greater  control  over  their  pri¬ 
vacy  with  new  software  from  Bell  Labs. 
The  technology  allows  mobile  phone 
users  to  specify  what  location  informa¬ 
tion  they  wish  to  share,  when,  with 
whom  and  under  what  criteria,  accord¬ 
ing  to  researchers  at  Bell  Labs,  a  divi¬ 
sion  of  Lucent  Technologies  Inc. 

Many  European  and  U.S.  carriers  al¬ 
ready  offer  a  range  of  location-based 
services,  enabling  them  to  track  cus¬ 
tomers  and  send  them  relevant  local 
information  about,  say,  restaurants, 
movie  theaters  and  retail  stores.  While 
some  users  appreciate  such  services, 
others  prefer  not  to  expose  themselves 
to  constant  surveillance. 

The  Bell  Labs  system  is  analogous  to 
querying  a  database.  The  request  is 
checked  against  the  user’s  preferences 
and  filtered  through  a  rules  engine, 
known  internally  at  Bell  Labs  as  “Hou- 
dini,”  before  action  is  taken.  This  entire 
process  takes  only  a  few  milliseconds. 

The  technology  could  appeal  to 
users  in  the  corporate  sector,  re¬ 
searchers  say.  Equipment  vendors,  for 
instance,  may  want  to  know  the  loca¬ 


tion  of  their  technicians  during  regular 
working  hours,  but  in  the  evening,  the 
technicians  may  prefer  to  disable  loca¬ 
tion-sharing  with  their  bosses. 

—  John  Blau,  IDG  News  Service 


FTC  Nets  Penalties 
For  C0PPA  Charges 

The  U.S.  Federal  Trade  Commission 
recently  settled  with  two  Web  site  op¬ 
erators  charged  with  violating  the 
Children’s  Online  Privacy  Protection 
Act  (COPPA),  netting  the  agency’s 
largest  civil  penalty  yet  under  the  law. 

Bonzi  Software  Inc.  and  UMG 
Recordings  Inc.  were  accused  of  col¬ 
lecting  personal  information  from 
children  online  without  their  parents’ 
consent  and  settled  for  penalties  of 
$75,000  and  $400,000,  respectively. 

Santa  Monica,  Calif.-based  UMG 
Recordings  operates  music-related 
Web  sites  and  was  charged  with  col¬ 
lecting  birth-date  information  from 


Conferences 


Computers,  Freedom  and 
Privacy  Conference 

April  20-23,  Berkeley,  Calif. 
http://cfp2004.org 

IT  Compliance  World 

May  17-19,  Boston 
http://itcinstitute.com/conference 

National  Global  HR 
Privacy  Conference 

May  26-27,  Washington 
www.pandab.org 

Privacy  &  American  Business’ 
Annual  National  Conference 

June  22-24,  Washington 
www.pandab.org 


MORE  RESOURCES 

Get  privacy  news,  columns  and  resources 
at  our  online  Privacy  Center: 

OQuickLink  s1200 

www.computerworld.com 
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Privacy  Policy  Road  Map 

Here’s  a  guide  to  crafting  a  privacy  policy  as  the  first  step  in  enterprise  privacy  management. 
Remember,  a  privacy  policy  is  no  good  if  customers  don’t  know  about  it,  employees  can't 
implement  it  and  the  company  doesn’t  enforce  it. 


1 
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Still  Need  Proof  of 
Storage  Interoperability? 

See  Multi-vendor  Interoperability  at  Work  at  the 
World’s  Largest  Storage  Solutions  Demonstration! 


DEMOHi 

Uniting  the  World  of  Storage  W  ORL.D 


STORAGE 

NETWORKING 


April  5-8,  2004  •  JW  Marriott  Desert  Ridge  Resort  *  Phoenix,  Arizona 


Produced  by: 

COMPUTERWORLD  SNIA 


Storage  Networking  World’s  multi-vendor  Interoperability  &  Solutions  Demo,  taking  place  at  the  twice-yearly  Storage 
Networking  World  conference,  April  5-8,  2004  in  Phoenix,  gives  you  a  complete  view  of  interoperability  in  a 
collaborative  and  vendor-neutral  setting.  Whatever  your  needs  -  whether  it’s  managing  more  storage  with  fewer 
resources,  looking  for  infrastructure  needs  to  support  disaster  recovery  strategies,  or  wondering  if  you  are  ready  for 
iSCSI  and  SMI-S  -  this  is  the  world’s  best  place  to  see  feature  sets,  supported  solutions  and  interoperability. 

To  register  to  attend  Storage  Networking  World  and  see  the  Interoperability  &  Solutions  Demo, 

visit  www.snwusa.com 


r 


Companies  planning  to  participate  at  the  Spring  2004  Interoperability  &  Solutions  Demo  include  (as  of  3/11/04): 
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SNAPSHOTS 

Cost  of  Privacy 

Setting  up  a  privacy  program  office 
is  the  costliest  part  of  privacy  efforts 
at  major  corporations.  Here  are 
the  most  expensive  parts 
of  that  cost  center: 


1 

Salaries  of  privacy  and 
data  protection  staff 

2 

Travel  expenses  for  meetings 

3 

Outside  consultants 

4 

Professional  associations 

5 

Specialized  education 
and  training 

BASE:  44  U.S.-based  multinational  companies 


SOURCE  “THE  COST  OF  PRIVACY  STUDY."  IBM 
AND  PONEMON  INSTITUTE  LLC.  TUCSON.  ARIZ.. 
FEBRUARY  2004 


Making  the  Grade 

A  consumer  group  recently 
issued  a  report  card  on  the  financial 
privacy  practices  of  55  California 
financial  services  companies. 
The  following  got  the  top  grades: 


■  Pacific  Life  Insurance  Co. 

■  Star  One  Credit  Union 


■  E-Loan  Inc. 


A»U.S.  Bank 

"  ■  First  Republic  Bank 
■  State  Farm  Insurance  Cos. 

■  21st  Century  Insurance  Group 
s-  Fireman’s  Fund  Insurance  Co. 


SOURCE  CONSUMER  FEDERATION  OF 
CALIFORNIA.  MILLBRAE.  CALIF.,  JANUARY  2004 


Most  Trusted 

A  ranking  of  the  industries  that 
consumers  trust  most  to  protect 
personal  information: 


Hospitals,  clinics 
Pharmacies 


Banks 

Charities,  religious  groups 
Airlines 

Car  rental  companies 
Utilities 


BASE:  Survey  of  1,000  U.S.  consumers 


SOURCES  PONEMON  INSTITUTE  LLC  AND 
VONTU  INC  .  SAN  FRANCISCO.  NOVEMBER  2003 


JAY  CLINE 


The  RFID  Privacy 
Scare  Is  Overblown 


THE  PRIVACY  SCARE  surrounding  radio  frequency  identification  tags  is  great¬ 
ly  overblown.  No  company  or  government  agency  will  be  secretly  scanning 
your  house  to  find  out  what  products  you’ve  purchased,  because  there’s  no 
feasible  way  to  do  so.  But  if  RFID  chip  makers  don’t  soon  allay  these  fears,  the 
escalating  public  emotion  about  this  issue  may  effectively  ban  the  most  valu¬ 
able  implementations  of  this  remarkable  technology. 


Hospitals  imagine  a  day  when  RFID  tags 
will  help  prevent  medical  errors  by  trans¬ 
mitting  the  correct  medicine  dosages  to 
nurses.  Appliance  makers  and  food  produc¬ 
ers  envision  faster  and  more  targeted  re¬ 
calls  of  defective  products.  Clothing  and 
shoe  stores  expect  RFID  tags  to  help  identi¬ 
fy  items  of  the  right  sizes  for  customers, 
enabling  faster  service.  Clothing  makers 
hope  the  tags  will  be  able  to  tell  washing 
machines  how  to  best  wash  items. 

Sound  too  good  to  be  true?  Wal-Mart  and 
the  Pentagon  don’t  think  so.  They’re  count¬ 
ing  on  RFID  tagging  to  bring  them  savings 
of  several  billion  dollars  from  lower  inven¬ 
tory  management  costs.  Items  will  no 
longer  need  to  be  individually  hand- 
scanned,  thus  expediting  product  loading, 
invoicing  and  customer  checkout.  Scanners 
might  be  placed  on  shelves  to  speed  re¬ 
stocking  and  installed  at  building  exits  to  prevent 
theft.  These  lucrative  benefits  prompted  both  organi¬ 
zations  to  mandate  that  their  suppliers  tag  cases  and 
pallets  with  RFID  chips  by  January  2005. 

So  what’s  the  problem?  Privacy  advocates  are  con¬ 
cerned  about  tags  on  products  continuing  to  emit 
signals  in  the  parking  lot,  on  the  road  and  at  home. 
They’re  worried  that  using  charge  cards  or  loyalty 
cards  during  checkout  could  result  in  customer  identi¬ 
ties  being  written  to  the  tags.  In  the  worst  scenario, 
they  imagine  stalkers  and  thieves  scanning  cars  and 
homes  for  expensive  goods  and  personal  information. 

Some  companies  are  already  experiencing  a  cus¬ 
tomer  backlash  with  their  product-level  tagging  trials. 
Shoppers  at  a  New  York  clothing  store  recently  com¬ 
plained  about  the  prospect  of  their  clothing  sizes  be¬ 
ing  beamed  into  the  air.  Wal-Mart  reportedly  had  to 
cancel  a  pilot  where  it  tagged  packages  of  high-end 
razor  blades  because  of  negative  consumer  feedback. 

Stories  of  people  being  tagged  have  only  heightened 
worldwide  fears  of  Big  Brother.  In  Mexico,  some  chil¬ 
dren  have  reportedly  had  RFID  chips  implanted  under 
their  skin  so  they  can  be  tracked  if  they’re  kidnapped. 
A  company  in  Brazil  has  supposedly  embedded  chips 


into  employees’  skin  to  control  their  access 
to  buildings.  A  school  in  Buffalo,  N.Y., 
requires  students  to  wear  RFID-tagged 
badges  to  track  arrival  times.  Some  have 
speculated  on  the  benefits  of  using  im¬ 
planted  RFID  chips  to  store  patients’  med¬ 
ical  and  criminal  histories.  With  friends 
like  these,  does  Wal-Mart  need  enemies? 

The  RFID  hype  has  certainly  outpaced 
reality.  Manufacturers  and  retailers  have 
yet  to  agree  on  a  universal  electronic  prod¬ 
uct  code.  RFID  scanning  is  also  far  from 
error-free.  But  more  important,  RFID  sig¬ 
nals  are  so  weak  that  they’re  easily  blocked 
by  metals  and  dense  liquids.  It’s  infeasible 
today  for  someone  driving  a  vehicle  down 
your  street  to  intercept  signals  from  RFID- 
tagged  goods  inside  your  home. 

The  economics  of  RFID  chips  also  limit 
how  they’re  used.  Until  the  price  of  RFID 
chips  comes  down  to  about  a  penny  apiece,  they’ll 
mostly  be  used  at  the  case  and  pallet  level,  clear  of  any 
personally  identifiable  activity.  So  we  have  several 
years  to  identify  the  privacy  controls  we  want  to  see 
in  RFID  systems. 

Some  companies  are  already  creating  these  privacy 
controls.  Chip  makers  and  users  are  discussing  how 
the  principles  of  data  privacy  could  be  built  into  the 
RFID  process.  A  top  priority  is  notifying  customers 
that  certain  items  are  tagged  with  these  transmitters 
—  which  could  be  done  by  placing  a  common  RFID 
logo  on  product  packages.  To  give  customers  the  abili¬ 
ty  to  turn  off  the  transmitters,  some  companies  plan  to 
make  them  peel-offs.  RSA  Security  Inc.  is  also  devel¬ 
oping  a  chip  that  could  be  worn  on  watches  or  bags  to 
block  nearby  RFIDs  from  transmitting  certain  infor¬ 
mation.  So  the  RFID  privacy  ball  is  rolling. 

But  the  gathering  storm  against  RFID  tags  may  soon 
outpace  these  positive  efforts  and  make  product-level 
RFID  tagging  taboo.  RFID  makers  and  users  should 
take  a  time-out  from  their  technical  discussions  and 
start  talking  more  with  the  public  about  what’s  going 
on.  Their  dreams  of  big  economic  returns  may  well 
depend  on  it.  ©  44795 


JAY  CLINE 

manages  data  privacy 
at  Carlson  Companies 
Inc.,  a  Minneapolis- 
based  group  of 
businesses  in  the 
travel,  hospitality  and 
marketing  industries. 
Contact  him  at  privacy® 
computerworld.com. 
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An  entire  PC  inside  a  keyboard 


APPLICATIONS: 

Business,  Call  Centers,  Banking 
Healthcare,  Retail, 
Internet  access,  Schools... 


Get  Rid  of 


the  Box, 

Save  Space. 


The  Zero-Footprint-PC,  Elite-4  is  an  entire 
PC  built  inside  a  normal  size  keyboard  and 
is  the  only  all-in-one  PC  that  gives  you 
total  display  flexibility.  You  may  use  any 
VGA  monitor  or  LCD  flat  screen  display. 

STANDARD  FEATURES: 

•  Intel®  Pentium®  4  Processor  up  to  2.80GHz/533  FSB 

•  128MB  DDR333  SDRAM  up  to  2GB 

•  40GB  IDE  7200  RPM  hard  drive,  up  to  any  size 

•  10/100  Ethernet,  4  USB  2.0,  2  IEEE1394  Firewire,  2  Serial  Ports 

•  2-Year  Limited  Warranty 

All  these  features  are  inside  the  keyboard! 


as  low  as 


$475 


for  ZPC4020,  Intel* 
Celeron *  1.70Chz 
Processor,  128MB 
Ram,  40CB  hard 
disk,  10/100  LAN 


CYBERNET 

Space  Saving  Technology 


For  produd  specs  and  model  options  visit  us  at:  WWW.Cyb6ril6tlT10n.COm, 

or  call:  TOLL  FREE  888-834-4577  International  949-477-0300 


...or  Not 


The  PC  Box 


Runs  all  Microsoft™  Windows  98/2K/XP/NT  operating  systems. 

U.  S.  Patent  Pending.  ©  2004,  Cybernet  Manufacturing,  Inc.  all  rights  reserved. 
The  Cybernet  logo  and  Zero-Footprint-PC  are  trademarks  of  Cybernet 
Manufacturing,  Inc.  Intel,  Intel  Inside,  Pentium,  Celeron  are  trademarks,  or  regis¬ 
tered  trademarks  of  Intel  Corporation,  or  its  subsidiaries  in  the  United  States  and 
other  countries.  Ail  other  registered  trademarks  are  property  of  their  respective 
owners.  Prices  and  specifications  are  subject  to  change  without  notice.  All  prices 
are  excluding  tax  and  shipping.  Monitor  not  included. 


OPTIONS: 

•  Internal  slim  CDRW/DVD 

•  Internal  floppy 

•  Internal  fax  modem 

•  DVI  (Digital  Video) 

•  Parallel  Port  •  TV-Out  (NTSC/PAL) 

•  Plastic  Skin  Protector 

•  LCD  Displays:  15",  17",  18" 
and  19"  (touch  screen  available) 

•  Wireless  802.1  Ib/g  available 
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NOTICE  OF  SALE  OF  ASSETS  AND  OPPORTUNITY  TO  BID 

PLEASE  TAKE  NOTICE  that  Philip  V.  Martino,  chapter  7  trustee  for  the  bankruptcy 
estate  of  Xentex  Technologies,  Inc.,  will  (himself  or  through  proxy)  conduct  a  public  auction 
on  April  14, 2004,  at  1:00  p.m.  at  the  United  States  Bankruptcy  Court  for  the  Northern  District 
of  Illinois,  Dirksen  Federal  Building,  219  South  Dearborn  Street,  Courtroom  680,  Room  610, 
Chicago,  Illinois,  of  the  bankruptcy  estate’s  intellectual  property  described  below  and  an 
automobile  pursuant  to  bidding  procedures  that  the  bankruptcy  court  has  approved. 

“Intellectual  Property”  includes,  but  is  not  limited  to,  Xentex’s  patents  (including,  but 
not  limited  to,  US  Patent  no.  6,081,207;  US  Patent  no.  5,949,643;  US  Patent  application 
serial  no.  09/690,799;  Chinese  patent  application  serial  no.  99816492.5;  Taiwan  patent 
application  serial  no.  088109026);  and  the  following,  whether  or  not  they  be  in  the  Trustee’s 
possession:  Xentex’s  trademarks  or  service  marks  and  the  good  will  appurtenant  thereto; 
Xentex’s  copyrights  and  works  of  authorship;  Xentex’s  drawings;  Xentex’s  laboratory  books; 
all  of  Xentex’s  originally-authored,  solely  owned  or  duly  licensed  software  (subject  to  the 
terms  of  applicable  license  agreements,  if  any);  Xentex’s  object  codes,  source  codes  and 
hardware  related  to  any  of  Xentex’s  actual  or  proposed  products;  Xentex’s  blueprints; 
Xentex’s  customer  and  supplier  lists;  Xentex’s  computers,  floppy  disks,  hard  drives,  cd  roms 
or  dvds;  or  any  paper  or  electronic  document  related  thereto  and  other  intellectual  property 
of  every  sort  and  description. 


“Automobile”:  Xentex’s  2000  Jeep  Grand  Cherokee. 

To  qualify  to  participate  in  the  auction,  any  party  bidding  must  deliver  to  the  Trustee’s 
counsel  at  or  before  the  auction,  among  other  things,  an  advance  cash  earnest  money 
deposit  of  $12,500  for  the  Intellectual  Property  and  $1,400  for  the  Automobile,  both  in  the 
form  a  cashier’s  check  or  certified  check.  A  complete  copy  of  the  bidding  procedures  is 
available  upon  request  by  contacting  the  undersigned  the  Trustee’s  counsel.  The  Trustee 
will  seek  approval  of  the  results  of  the  auction  before  the  Honorable  John  H.  Squires,  United 
States  Bankruptcy  Judge,  on  April  15,  2004  at  9:30  a.m.  at  the  United  States  Bankruptcy 
Court  for  the  Northern  District  of  Illinois,  Dirksen  Federal  Building,  219  South  Dearborn  Street, 
Courtroom  680,  Chicago,  Illinois. 

For  a  complete  set  of  bidding  procedures,  please  contact  the  Trustee’s  attorney,  Colleen 
E.  McManus,  PIPER  RUDNICK  LLP,  203  North  LaSalle  Street,  Suite  1800,  Chicago,  Illinois 
60601-1293,  phone:  (312)  368-7027,  or  email  colleen.mcmanus@piperrudnick.com. 


Advertising  Supplement 

IT  Careers  in  Financial  Services 


Tens  of  thousands  of  jobs  were  cut  in  the 
financial  services  sector  over  the  past  three 
years.  But  the  cycle  seems  to  be  changing  as 
new  investments  in  technology  and  an  uptick  in  job 
postings  are  replacing  news  of  layoffs. 


In  two  recent  reports,  Financial  Insights 
and  IDC  noted  increases  in  financial 
services  IT  spending  for  everyone  from  Wall 
Street  to  community  banks.  IDC's  2004 
report,  U.S.  IT  Spending  Forecast  Update 
by  Vertical  Market,  found  that  IT  spending 
in  banking  and  manufacturing  leads  all 
industries  for  the  next  four  years,  the 
combination  of  the  two  accounting  for 
one-third  of  the  $391  billion  to  be  invested 
in  IT. 


Peeling  back  that  investment, 
Financial  Insights  looked  at  the  specifics 
of  IT  in  financial  services  in  three  categories 
-  capital  markets,  corporate  banking  and 
retail  financial  services.  In  the  capital 
markets  category,  Financial  Insights  predicts 
Wall  Street  firms  will  reduce  the  complexity  of  data 
infrastructure  and  invest  in  automated  systems 
for  trading  and  credit  risk  management.  The 
corporate  banking  category  within  financial  services 
is  expected  to  invest  in  profitability  management 
tools,  customer  e-care,  integration  of  legacy 
systems  and  new  models  in  business-to-business 


The  Charles  Schwab  story  is  reiterated 
across  the  sector.  The  American  Banking 
Association's  community  banking  division  lists 
information  technology  officers  as  one  of  the 
top  three  most  difficult  slots  to  fill,  alongside 
compliance  and  trust  officers.  According  to 
Heather  McElrath,  ABA  spokeswoman, 
community  banks  are  expanding  physically 
with  new  branches  and  need  to  continuously 
upgrade  their  online  banking  capability  for 
customers  who  want  24  hour  per  day  service. 
Both  require  complex  IT  systems  in  a  niche  of 
financial  services  that  has  been  slowly  building 
capability  over  the  past  four  years. 


The  investment  levels  have  to  be  balanced 
with  other  trends.  While  capital  markets  are 
expected  to  reduce  the  number  of  IT  vendors,  reports 
indicate  American  Express  will  continue  to  heavily 
outsource  IT  work  (some  estimates  as  high  as  70%). 
Charles  Schwab/CyberTrade  cut  10,000  jobs  during 
the  down  cycle  but  early  this  month  had  more  than 


For  more  information  about  IT  Careers  advertising, 

please  contact:  Nancy  Percival 

Vice  President,  Recruitment  Advertising 

800.762.2977 

500  Old  Connecticut  Path 

Framingham,  MA  01701 

Produced  by  Carole  R.  Hedden 


trade  services.  Retail  financial  services  are 
expected  to  increase  IT  spending  by  about  4.5%  this 
year  to  better  manage  fraud,  credit  risk  and 
international  payment  processing  and  delivery 
systems. 


100  jobs  posted.  The  corporation  is  looking  for 
information  technology  experts  to  help  them  push 
forward  their  strategy  of  personal  investment 
consulting.  Jobs  ranging  from  business  analysts  to 
programmers  to  application  developers  are 
posted,  along  with  a  plum  job  as  vice 
president  of  Schwab  Investment 
Management  Technology. 


Seeking  qualified  applicants  for 
the  following  positions  in  Mem¬ 
phis.  TN:  Operations  Research 
Analyst.  Using  operations  re¬ 
search  methods,  analyze  broad 
and  complex  corporate  prob¬ 
lems/projects.  Requirements: 
master's  degree  or  equivalent* 
in  operations  research,  applied 
mathematics,  engineering  or 
other  quantitative  field  plus  1 
year  of  experience  in  systems 
analysis,  engineering,  applied 
mathematics  or  related  field. 
Education  and/or  experience 
must  have  included:  develop¬ 
ment  of  optimization  models; 
development  of  heuristic  algo¬ 
rithms  using  C  and/or  C++;  and 
development  of  statistical  mod¬ 
els  using  Minitab.  *Ph.D.  in 
appropriate  feld  will  offset  expe¬ 
rience  requirement.  Submit  res¬ 
umes  to  Michael  Umlauf, 
Federal  Express  Corporation, 
3680  Hacks  Cross  Road,  H- 
2220,  Memphis,  TN  38125. 
EOE  M/F/D/V. 


Usability  Architect  to  develop 
user-oriented  interfaces  based 
on  Cognitive  Ergonomic/HCI 
principles.  Requires  Masters 
degree  with  focus  in  HCI,  plus  2 
yrs.  experience  as  Usability 
Engineer  involving  computer 
software  development  including 
cognitive  task  analysis,  usability 
testing,  heuristic  evaluation,  in¬ 
ferential  statistical  analysis, 
advanced  web  technology 
(AS400,  HTML,  Webserver  and 
computerized  graphics  design) 
and  Yield  Management  princi¬ 
ples.  Send  resume  to  isiobsiS) 
erac.com  and  reference  the 
Usability  Architect  job  title  and 
code:  JMVL  in  the  subject  line 
of  your  email  or  mail  to  IS 
Recruiting,  Attn:  JMVL,  Craw¬ 
ford  Group,  600  Corporate  Park 
Dr.,  St.  Louis,  MO  63105. 


Data  Communications  Analyst 

Resolve  all  daily  data  commu- 
nics  &  oper  probs  for  all  comp 
systems  users  in  Ig  pkng  dev't  & 
mgmt  co.  Use  existing  s/ware  & 
h/ware  or  upgrade  when  neces¬ 
sary,  to  max'ize  effic.  workflow  & 
increase  productivity  by  users. 
Research  &  implement  means 
by  w/c  comp  systems  may  be 
max'ized  in  the  promo  of  co's 
mktg  &  advertising  efforts. 
Inspect  all  communics  wires  & 
cables  to  ensure  effic  opers. 
Test  &  eval  si  &  h/ware  to  deter¬ 
mine  effic.,  reliability,  &  compati¬ 
bility  w/  existing  systems. 
Monitor  system  perf  &  replace  or 
upgrade  as  necessary  to  ensure 
system  compatibility  w/  HQ.  40 
hrs/wk,  9a-5:30p  $31,000/yr  sal. 
Job  loc'd  in  Miami,  FL.  Bach's 
degree  or  equiv  prefd  in  Comp 
Sci  or  rel  concentration  &  1  yr 
exp.  in  the  job  req'd  or  in  rel 
comp  tech  position.  Verif  refs 
req'd.  Send  resume  to:  AWI, 
PO  Box  10869,  Tallahassee,  FL 
32302.  RE:  JOFL  2484715. 


Software  Engineer  IV:  For  co. 
specializing  in  mktg  &  mnfg  of 
computer  software,  design, 
code,  implement  &  test  complex 
product  enhancements.  Res¬ 
earch  new  feature's  concepts  & 
establish  plans  &  coordinate 
them;  analyze  problems  &  sug¬ 
gest  innovative  solutions;  design 
&  test  plans;  train  &  review 
design  work  of  programmers. 
Req's:  Bachelor's  degree,  or 
equivalent,  in  Computer  Science 
or  a  related  field.  3  yrs  exp  in  job 
offered  or  3  yrs  software  devel¬ 
opment  exp.  Exp  must  include 
Object-Oriented  programming, 
design  &  analysis.  Exp  can  be 
gained  while  pursuing  degree. 
Proficiency  in  C++,  UNIX 
Scripting,  UML,  Java,  &  SQL 
Server  40hrs/wk.  Send  res.  to 
box  C-4,  P.O.  Box  17182,  Phila, 
PA  19105. 


Director  of  Information 
Technology  wanted  to  manage 
information  technology  needs 
for  line  of  business-Business  & 
Industry,  based  in  Downers 
Grove,  IL.  Hrs  are  M-F  9  to  5. 
Must  have  BS  in  Computer 
Science,  Engineering  or  related 
field,  plus  extensive  experience 
including  at  least  3  yrs  exp  in 
position  offered  or  in  a  related 
occupation  such  as  Software 
Consultant  or  Project  Engineer 
for  information  systems  develop¬ 
ment  and  implementation.  Prior 
experience  in  all  of  the  following 
areas  is  required:  Data  Manage¬ 
ment  Tools  (MS  Access,  SQL 
Server,  and  Oracle),  Comp¬ 
uterized  Maintenance  Manage¬ 
ment  Systems  (CMMS), 
Management  Information  Syst¬ 
ems,  Computerized  Numerical 
Control  Machines-Design  & 
Maintenance,  Business  Process 
Re-Engineering,  and  Manage¬ 
ment  Consulting.  Apply  online  at 
www.aramarkcareers.com,  or 
request  application  by  writing  to 
Jackie  Meredith-Batchelor,  P.O. 
Box  8018,  Philadelphia,  PA 
19101-8018. 


Computers  -  Sr.  Technical  Arch¬ 
itects  needed.  Seeking  qual. 
cand.  possessing  MS/BS  or 
equiv.  and/or  rel.  work  exp.  Part 
of  the  exp.  must  include  4  yrs. 
working  with  BaanERP,  Baan 
OpenWorld  &  XML.  Duties 
include:  Design  &  develop  IT 
software  solutions  for  clients  in 
Enterprise  Application  &  Mid¬ 
dleware  implementations;  Work 
with  Baan  ERP,  Baan  Open- 
World,  C++,  Java,  XML,  .NET  & 
SAP  connectors.  Fwd.  resume 
&  ref.  to:  e-Emphasys  Tech., 
Attn:  HR,  2401  Weston  Park¬ 
way,  Suite  101,  Cary,  NC 
27513. 
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DATA.  WIRELESS.  NETWORK. 
YES,  YOU’RE  IN  THE 
RIGHT  NEIGHBORHOOD. 
WE  LIVE  WHERE  YOU  LIVE: 


1  M 


What  can  a  company  like  State  Farm  possibly  offer  in  the  way  of  I.T.?  Just  one 
of  the  nations  largest  computer  networks.  The  drive  of  a  Fortune  25  company. 
And  a  wealth  of  IT.  opportunities.  How  do  you  like  the  neighborhood  so  far? 


STATE  FARM 


LIKE  A  GOOD  NEIGHBOR 


STATE  FARM  IS  THERE. 


INSURANCE 


For  more  information,  visit  statefann.com* or  email  jobopps.corpsouth@statefarm.com. 


State  Farm  •  Home  Offices:  Bloomington,  Illinois  •  An  Equal  Opportunity  Employer 
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PROGRAMMER  ANALYSTS 
for  Springfield,  IL  office.  De¬ 
sign  &  Develop  software  appli¬ 
cations  using  C++,  Oracle, 
Sybase,  XML,  UML,  Coolgen, 
Interwoven,  ClearCase,  Clear- 
Quest,  ITS,  PVCS,  UNIX. 
Bachelors  req'd  in  Computers, 
Engineering,  Math  or  related 
field  of  study  +2  yrs  of  related 
exp.  40  hrs/wk.  Must  have 
legal  authority  to  work  perma¬ 
nently  in  the  U.S.  Contact  HR 
Manager,  Global  Infotech 
Solutions,  Inc,  826  West 
Laurel,  Suite  IB, Springfield, 
IL-62704. 


PROGRAMMER  ANALYST:  3 
positions  available.  Plan,  devel¬ 
op,  test,  and  document  comput¬ 
er  programs  for  flat  rolled  steel 
production  scheduling  systems, 
sales  order  entry  systems,  auto¬ 
mated  reporting  systems  and 
EAServer  development.  Must 
have  B.S.  or  foreign  equivalent 
in  MIS,  computer  science,  or 
electrical  engineering  and  9 
mos.  exp.  in  job  offered.  40- 
hrs/wk,  8A  to  5P.  Must  have 
authorization  to  work  in  the  U.S. 
on  a  permanent  basis.  Qualified 
applicants  send  resumes  to 
Steel  Dynamics,  Inc.,  Attn:  R. 
Francis,  6714  Pointe  Inverness 
Way,  Ste.  200,  Ft.  Wayne,  IN 
46804. 


System  Analyst  needed, 
w/exp  in:  Lotus  Notes 
Domino  Web  application 
using  Lotus  Notes,  Lotus 
Notes  R5,  Java  Script, 
Visual  Basic,  Lotus  Script, 
HTML,  DHTML,  XML,  XSLT 
and  XSL  FO.  Send 
resumes  to:  Netsource 
Communications,  Inc. 
12700  Dupont  Circle, 
Tampa,  FL  33626. 


Programmer  Analysts  for  Peoria, 
IL  office.  Design  &  Develop  soft¬ 
ware  applications  using  Oracle, 
Erwin,  Interwoven,  Coolgen, 
XML,  UML,  C++,  ClearCase, 
PVCS,  UNIX;  Bachelors  reqd  in 
Computers,  Engineering,  Math 
or  any  related  field  of  study  +  2 
yrs  of  related  exp.  40  hrs/wk. 
Must  have  proof  of  legal  author¬ 
ity  to  work  permanently  in  the 
U.S.  Send  resume  to  HR 
Manager,  Redsalsa  Techn¬ 
ologies.  Inc.  14001  ,N.  Dallas. 
Parkway,  #  550  Dallas,  TX 
75240 


IT  Careers 
Wants  You! 

Take  the  hassle  out  of 
job  searching  and 
check  us  out  at 
www.itcareers.com. 
Today,  more  than  ever, 
the  right  skills  fuel  the 
new  economy  and  IT 
Careers  wants  you  to  be 
there.  Check  us  out  at: 
www.itcareers.com 
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Miami,  FL  -  Adjoined  Consulting 
seeks  Principal  and  Sr.  Principal 
Consultants  as  well  as  Man¬ 
agers  with  full  project  cycle 
experience  using  combinations 
of  Oracle,  Business  Objects, 
Cognos,  SAP  and  Peoplesoft  to 
provide  ERP  solutions.  Re¬ 
quires  2  years  of  experience  for 
Principal  Consultant  and  5 
years  of  experience  for  Sr. 
Principal  Consultant  and 
Manager  positions.  For  consid¬ 
eration,  e-mail  your  resume  to 
recruiting@adjoined.com. 


PROGRAMMER  ANALYST 

Plan,  develop,  test,  &  document 
computer  software  for  business 
applications  using  Progress 
4GL,  Progress  RDBMS,  UNIX, 
SQL,  Java  &  JSP  in  WIN  &  UNIX 
environments.  Bachelor's  de¬ 
gree  or  equivalent  in  Comp  Sci, 
Comp  Engg  or  Elec  Engg.  2  yrs 
work  exp.  40  hrs/wk,  8am- 
4:30pm.  Send  resume  to: 

HR  Dept.,  Integrated  Systems 
&  Services  Group 
Overlook  Towers 
150  Clove  Rd. 

Little  Falls,  NJ  07424 


Internet  Dvlpr.  /Graphics  Artist  to 
design  art  &  layouts  for  visuals  w / 
print  &  elec,  media.  Use  Adobe 
lllust.,  Photoshop,  Acrobat, 
Quark  X-Press  &  MS  products 
for  graphics,  logo  &  web  site 
design.  Use  HTML,  PHP  & 
JavaScript  in  web  page  design. 
Design  &  maintain  internal 
Intranet  web  sites.  Copy  writing 
for  web  page  &  newsletter  arti¬ 
cles,  corporate  events,  mes¬ 
sages  &  proj.  summaries.  De¬ 
velop  animation  &  other  multime¬ 
dia  tech,  using  Adobe  Premiere, 
Macromedia  Director  &  Flash. 
Bachelor's  in  Graphics  Arts  +  2 
yrs.  exp.  in  job  duties.  Comp, 
salary  at  prev.  wages.  Apply: 
OSI,  4005  Windward  Plaza,  # 
550,  Alpharetta,  GA  30005  + 
proof  of  perm.  Work  authzn. 


Prog/Analysts  to  analyze,  de¬ 
sign,  implement  appls  using 
OOAD,  C,  C++,  VC++,  VB, 
Oracle,  HTML,  SQL  Server,  GUI 
tools,  ASP,  VBScript,  Crystal 
Reports  under  Windows,  UNIX 
&  Sun  Solaris  (or)  C,  C++, 
VC++,  Socket  Programming, 
Shell  Scripting,  TCP/IP,  Ration¬ 
al  Rose,  Clear  Case,  etc.  under 
Windows,  Unix  and  VxWorks; 
perform  testing,  debugging, 
documentation  of  appls;  main¬ 
tain  and  support  existing  appls. 
Require:  B.S.  or  foreign  equiv. 
in  CS/Engg.  (any  branch)  &  2 
yrs  exp.  in  IT.  Travel  involved. 
F/T.  Comp,  salary.  Resumes  to: 
HR,  Ciphertrust,  Inc.,  4800 
North  Point  Parkway,  Ste  400, 
Alpharetta,  GA  30022. 


PROGRAMMER  ANALYST  / 
SOFTWARE  ENGINEER-  Cyber 
Technology  Group,  Portland, 
Maine  needs  experienced  s/w 
professionals  with  experience  in 
object  oriented  and  distributed 
systems,  developing  software 
applications  using  Java  /J2EE 
(Weblogic),  C++,  XML/XSLT, 
TCP/IP,  Oracle,  common  design 
patterns,  UML,  RUP  and  Model 
Driven  Architecture.  Knowledge 
of  collaborative  systems  and 
mobile  code  is  a  plus.  Please 
email  your  resume  to 
hr@cybertechgroup.com  or  mail 
to  CTG  480  Congress  Street, 
Ground  Floor,  Portland,  ME 
04101. 


Master  of  Science  in  Systems  Administration 

Advance  in  today’s  rapidly  growing  world  of  technology  with  a  Master’s  in  Systems  Administration  from  NYU.  This 
powerful  new  program  provides  students  with  the  skills  they  need  to  implement,  manage,  and  troubleshoot  today’s  most 
complex  network  and  systems  environments.  The  degree  focuses  on  translating  business  objectives  into  specific  system 
requirements,  ensuring  a  high  level  of  security,  and  understanding  the  needs  of  application  programmers  and  users. 

Sophisticated  technological  systems  are  at  the  core  of  the  way  all  businesses  are  run  today.  Our  challenging  curriculum 
and  faculty  of  industry  leaders  make  certain  that  graduate  candidates  earn  the  skills  and  gain  the  knowledge  to  become 
top  quality  systems  administrators,  and  form  networks  that  will  provide  important  professional  contacts. 

A  Master’s  degree  from  NYU  -  a  tradition  of  innovation  and  excellence. 

1-888-998-7204,  ext.532 
www.scps.nyu.edu/532 


Newark 

(NJIVERSnY 

J  A  PWVAIE  UNIVERSITY  IN  Ttlt  PUBUC  SERVICE 

School  of  Continuing  and 
Professional  Studies 


New  York  University  is  an  affirmative  action/equal  opportunity  institution.  ©2004  New  York  University  School  of  Continuing  and  Professional  Studies 


Information  Sessions: 

Please  call  the  number  below 
to  RSVP. 


Wednesday,  March  24 
6-8  p.m. 

American  Management  Association 
1601  Broadway,  8th  Floor 
(at  48th  Street) 


Wednesday,  April  28 
6-8  p.m. 

American  Management  Association 
1601  Broadway  8th  Floor 
(at  48th  Street) 


www.itcareers.com 
Where  The  Best  Get  Better! 
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Banking 

MBNA  America  Bank,  N.A.,  the 
world's  largest  independent  credit 
card  issuer,  is  accepting  applica¬ 
tions  for  several  Analyst  III 
Technical  positions. 

Duties:  This  position  assists  in  the 
support  and  development  of  the 
SQL  Server  Database,  PC  based 
applications,  and  the  manage¬ 
ment  of  related  projects  from  initi¬ 
ation  through  implementation. 
Additional  responsibilities  include 
developing  increasingly  complex 
applications  and  queries  to  pro¬ 
vide  information  to  the  desktops  of 
Financial  Analysts;  performing 
technical  analysis  and  research  to 
provide  management  with  deci¬ 
sion-making  information;  provid¬ 
ing  Business  Change  support  in 
the  capacity  of  backup  support  for 
daily  reconciliation,  problem  reso¬ 
lution,  and  impact  analysis;  assist¬ 
ing  in  the  management  of  MS 
SQL  Servers;  ensuring  that 
enabling  technologies  are 
deployed  and  stable  to  meet  pro¬ 
ject  and  sector  needs;  supporting 
mission  critical  applications  devel¬ 
oped  by  the  Information  Delivery 
Team;  performing  problem  solv¬ 
ing/trouble  shooting  duties;  and 
evaluating  new  technology  and 
software  for  financial  sector  use. 
Finally,  this  position  provides  pro¬ 
ject  management  expertise  by 
functioning  as  a  lead  technical 
analyst  in  the  development  of 
strategic  and  tactical  plans  by 
identifying  project  resources,  and 
by  developing  and  communicating 
status  reports  and  actions  plans  to 
management. 

Requirements:  Bachelors  deg¬ 
ree  in  Computer  Science,  a  relat¬ 
ed  field,  or  the  equivalent  techni¬ 
cal  training.  Must  have  at  least  2 
years  experience  with  Information 
Systems,  system  development 
methodologies,  and  program¬ 
ming.  Experience  with  Visual 
Basic,  Intranet  technologies,  DB2, 
and  SQL  Server  also  required. 

Salary:  $63.  024  per  year 

Hours:  Monday-  Friday  8:00 
a.m.  until  5:00  p.m. 

A  master's  degree  in  Computer 
Science  or  a  related  field  will  be 
accepted  in  lieu  of  the  experience 
requirement. 

Please  reference  code  number: 
DE203819  and  forward  (2) 
resumes  to: 

Delaware  Department  of  Labor 
Division  of  Employment 
and  Training 
Attention:  Olga  Hungria 
4425  N.  Market  Street, 

P.O.  Box  9828 
Wilmington.  DE  19809-0828 


Sr.  Developer  for  comput¬ 
er  co  in  Larchmont,  NY. 
Must  have  4  yrs  exp  in  all 
aspects  of  s/ware  devel¬ 
opment.  Send  resume  to: 
Timelink,  2635  Boston 
Post  Rd,  Larchmont,  NY 
10538,  attn:  Dale 


Senior  Software  Engineer  for 
engg  dsgn  svcs  Co  for  wireless 
telecom  in  Redmond,  WA. 
Responsible  for  reqmts,  dsgn  & 
implmtn  of  embedded  applies  for 
wireless  devices  &  dvlpg  wire¬ 
less  protocol  stacks  or  s/ware 
for  telecommunications  eqpmt. 
Specific  duties  of  position  incl: 
s/ware  dvlpmt  for  telecomm 
industry;  specify  s/ware  reqmts 
using  an  object  oriented  reqmts 
tool  (such  as  UML)  &  dvlpg 
voice  applies  for  mobile  devices; 
dvlp  object  oriented  s/ware  in 
C++  or  Java;  dvlp  embedded 
applic  s/ware  for  Symbian 
Operating  System  (or  other  win¬ 
dowing  envrmt  such  as  Win  CE 
or  Palm  OS),  J2ME  &  BREW; 
independently  taking  dvlpmt  pro¬ 
jects  thru  entire  s/ware  dsgn  life- 
cycle;  &  provide  tech  supervi¬ 
sion  &  guidance  to  jr.  level 
engrs.  In  carrying  out  duties,  use 
MS  Visual  Studio,  ARM  compiler 
&  linker  toolset,  J2ME  wireless 
toolkit,  Jtag  debugger,  &  Agilent 
8960  wireless  test  set  or  equiv 
eqpmt.  Reqs  Bach  or  equiv  in 
Comp  Sci  or  related  field.  5  yrs 
exp  in  job  offd  or  5  yrs  exp  in 
dvlpg  object  oriented  s/ware  in 
C++  or  Java.  Respond  to  HR 
Mgr,  Job  Code  #SWENG01-IT, 
Elektrobit,  Inc,  11121  Willows  Rd 
NE,  Ste  200,  Redmond,  WA 
98052. 


Multimedia  Web  Developer. 
Consults  w/  design,  technical, 
&  marketing  staff  to  plan  web 
site  dev.  Develops  graphic  & 
technical  architecture  of  web 
sites  including  database 
design  &  user  interface 
design.  Req  Bach.  in 
Advertising  or  Related  Field  & 
1  yr.  of  exp.  in  job  or  1  yr.  of 
exp.  as  a  Graphic  Designer/ 
Visualizer.  Send  Resume: 
Steven  Cohen,  Tempart,  Inc., 
412  SE  13th  St.,  Fort 
Lauderdale,  FL  33316  (job- 
site). 


Senior  Programmers  with  MS  in 
CS  and  min  2  yrs  exp  wanted  in 
Houston.  Must  have  working 
knowledge  of  ASP.  .NET,  J2EE, 
SQL,  XML,  BizTalk  Server  2002, 
WebMethods,  Oracle  Certified 
DBA,  MCSD,  MCDBA,  wireless 
applications.  Resume  to:  E- 
Ceptionist,  Inc.,  2000  Bagby, 
Ste.  5430,  Houston,  TX  77002. 


Software  Developer  to  analyze, 
design,  develop  appls  including 
IP  appls  using  ASP,  ASP.NET, 
VB.NET,  HTML,  Java,  Java¬ 
Script,  VC++  ,  VB,  COM,  Oracle 
9i,  PL/SQL,  XML,  XPATH,  XML- 
DOM,  WEBDav,  IIS  5.0,  SOAP 
etc;  develop  data  aware  security 
model  using  Oracle  XML  DB 
running  Java  External  Routines 
on  Oracle  9i  in  conformance 
with  XACML 1 .0  standards;  write 
components  for  establishing 
asynchronous  data  transfer  us¬ 
ing  MSMQ;  co-ordinate  with  off¬ 
shore  development  team  and 
provide  end  user  training.  Re¬ 
quire  a  B.S.  or  foreign  equiv  in 
CS/Engg  (any  branch)  with  3  yrs 
exp  in  IT.  High  salary.  F/T.  Travel 
involved.  Resume  to  HR,  Triton 
Information  Technologies,  Inc, 
501  Silverside  Road,  Suite  139, 
Wilmington,  DE  19809. 

Software  Engineer:  For  co.  spe¬ 
cializing  in  mktg  &  mnfg  of  com¬ 
puter  s/w,  write/modify  applica¬ 
tions,  programs  &  modules  from 
design  specs;  test,  maintain, 
debug,  update  &  assist  in  estab¬ 
lishing  quality  assurance  plans 
for  programs  &  applications; 
keep  current  w/  evolving  sys 
analysis,  programming  &  data¬ 
base  tech.  Develop  &  test  com¬ 
plex  SQL  stored  procedures, 
view  &  functions;  develop  data 
marts  using  by  MS  Analysis 
Srvs;  provide  on-call  customer 
support.  Req's:  Bachelor's,  or 
completion  of  degree  require¬ 
ments,  in  Comp  Sci,  Info  Sys  or 
a  related  field.  1  yrs  exp  in  job 
offered  or  1  yr  of  programming 
exp.  Exp  must  include  support¬ 
ing  PC's,  mainframe  or  Web- 
based  environments.  Proficien¬ 
cy  in  Oracle,  Java  &  SQL  Server 
40hrs/wk.  Send  res.  to  box  C-5, 
P.O.  Box  1924,  Phila,  PA  19105. 

PROGRAMMER  ANALYST  / 
SOFTWARE  ENGINEERS 

Needed:  Several  Sr.  and  Mid 
Level  positions  available  for 
qualified  candidates  possessing 
MS/BS  &  relevant  work  experi¬ 
ence.  Work  with  COBOL,  JCL, 
VSAM,  DB2,  CICS,  ORACLE, 
JAVA,  SERVLETS,  XML,  EJB, 
C++,  VC++,  SYSTEM  ADMIN, 
DBAs,  SAP,  Seibel,  Peoplesoft 
and  Technical  Recruiters. 

Please  mail  resume  to  Attn:  HR 
Dept.  LanceSoftlnc,  2200  West 
Higgins  Road,  Suite  210  C, 
Hoffman  Estates,  IL-  60195. 

Material  Management  Analyst 
wanted  by  Danco  (subsidiary  of 
NCH  Corp)  to  handle  manage¬ 
ment  of  import  &  vendor  rela¬ 
tions!,  obsolete  inventory. 
Outsourcing  activities.  Must 
have  minimum  bachelor  in  man¬ 
agement  with  experience. 
Please  apply  at : 
chriscol@nch.com.  EOE.  No  calls. 

Infomerica  is  looking  for  sys¬ 
tem/programmer  analysts,  soft¬ 
ware/project  engineers  &  com¬ 
puter  consultants  working  at  dif¬ 
ferent  sites  (travel  required). 
Candidates  must  have  BS  with 
1-year  exp.  in  IT  fields.  Skills  of 
Oracle,  Informix,  Java  preferred. 
Send  resumes  to: 
info@infomericainc.com  EOE. 

Systems  Analyst.  Responsible 
for  Wholesale  Distribution 
Systems  analysis,  design,  and 
development;  website  design 
and  programming;  computer 
system  support  needs;  and 
research  and  dissemination  of 
information  on  technology 
issues.  Must  have  two  years 
college  in  Comp.  Sci.,  MIS  or 
Business  Tech.,  two  years 
exp.,  and  knowledge  of  PRO¬ 
GRESS  and  UNIX.  Send 
resume  to  MT  Sports,  LLC, 
Attn:  Norm  Pollock,  650 
Carbon  St.,  Billings,  MT 
59102. 

Software  Performance  Engin¬ 
eers,  Boston.  Develop,  plan  & 
execute  performance  tests  for 
bus/financial  s/w,  incl.  integra¬ 
tion,  regression,  load,  &  stress 
on  multi  configs  &  platforms; 
assure  standards  &  scalability; 
training,  cust.  interaction  &  on¬ 
site  trouble-shooting.  Use  J2EE 
mgmnt  s/w,  websphere/DB2  on 
AIX,  Load  Runner,  SILK  Perfor¬ 
mer  &  proficiency  in  config  & 
tuning  multi-tiered  apps.  Reqs: 
MS  eng  or  comp  sci  &  6  yrs  exp 
as  sys  eng  or  analyst,  including 
full  lifecycle  develop.  UNIX, 
Korn  shell,  sed,  awk  &  4  yr.  exp. 
in  PERL,  2  yrs.  XML.  Perm 
workers  only.  Resumes  to:  N. 
Green,  SI,  Inc.  3500  Lenox  Rd. 
Ste.  200  Atlanta  GA  30326. 

Programmers  &  Software 
Engineers:  Analyze,  design, 
develop  apps.,  in:  (A) 
Vertex,  Goldmine,  Lawson 
Financials,  Oracle/SQL 
Server  2000;  (B):  Oracle 
and  related  tech.,  SAS  & 
related  SAS  tools,  Proc 
Format,  Metadata,  Cognos, 
Dataminer.  Oracle/SAS 
Cert,  preferred.  Attn:  Chet 
Patel,  120  Bluegrass 
Parkway,  Alpharetta,  GA 
30005. 

Advansoft  (Soft  O  Soft)  is  look¬ 
ing  for  program  or  system  ana¬ 
lysts,  IT  engineers.  Candidate 
must  have  BS  or  equivalent. 
Exp.  in  IT  area  such  as  Oracle, 
Java,  VB,  WebSphere/Weblogic 
etc  is  plus.  Travel  maybe 
required  for  some  position. 
Please  email  resumes  to: 
info@advansoft.com.  EOE 

System  Analyst  or  Software 
Engineers  wanted  by  Mobics,  a 
small  but  stable  company.  Job 
duties  include:  work  on 
Java/Script,  JSP,  Servlets,  Unix, 
Oracle.  Travel  maybe  required. 
Min  qualification  is  BS+exp. 
Competitive  wage  with  full  bene¬ 
fits.  Please  apply  at  : 
info@mobics.com.  EOE. 

A  Call 
To  Action! 

Take  the  hassle  out  of 
searching  for  the  right 
candidate  and  contact  us 
at  (800)  762-2977. 

We  can  place  your 
message  in  front  of  2/3  of 
all  US  IT  professionals. 

Call  (800)  762-2977 
www.itcareers.com 


IT  Education  &  Training  Directory 


Contact  the  companies  listed  below 
to  help  you  with  your  training  needs! 


■  ;  •-  ‘  '*  >jV:. 


To  place  your  ad  please  call  800-762-2977 
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Want  a  new 
IT  career? 


Check  out  our  jobs 
in  the  combined 
CareerJournal.com 
database. 


www.itcareers.com 


Calif  based  IT  co  has  open¬ 
ings  at  its  Torrance,  CA  and 
Milwaukee,  Wl  ofcs  and  at 
unanticipated  client  sites  ac¬ 
ross  the  US  for  Prgmmr 
Analysts,  Sftware  Eng,  Sys¬ 
tems  Analysts,  Biz  Dvlpmnt 
Consultants  and  Biz  Analysts. 
Send  resume  with  salary  reqs 
to  RJT  Compuquest,  23430 
Hawthorne  Blvd.,  #305, 
Torrance,  CA  90505  Attn:  HR. 


by  gaining  access  to  our 


IT  community  of  qualified 


IT  professionals.  Check  out 


our  winning  team  at 


www.itcareers.com 


Assistant  Business  Develop¬ 
ment  Officer:  Contact  new 
clients  in  territorial/industry  area 
of  responsibility,  maintain  rela¬ 
tionships  with  established 
clients,  participate  in  Information 
Technology  development  project 
proposals,  support  Business 
Development  Officer  in  negotiat¬ 
ing  Information  Technology 
development  contracts,  develop 
data  on  required  skill  sets  for 
project  completion,  translate 
technical  specifications  for  pro¬ 
ject  teams,  monitor  project 
teams  for  time  table  compliance. 
Must  have  Bachelor’s  or  equiva¬ 
lent  in  Engineering,  Computer 
Science  or  Business,  lyr.  exper. 
in  job  offered  or  1  yr.  exper.  in  IT. 
Salary  $52,000/yr.  40  hr/wk,  M- 
F,  8  a.m  -  5  p.m.  Submit  two  (2) 
resumes  to  Case  #  200203628, 
Division  of  Career  Services, 
Labor  Certification  Unit,  19 
Staniford  St.,  1st.  fl.,  Boston,  MA 
02114. 


Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of  de¬ 
sign;  direct  software  system 
testing  procedures  using  exper¬ 
tise  in  VB.NET,  ASP.NET,  SAP, 
DB2,  XML  and  XSLT.  Require¬ 
ments:  Bachelor's  Degree  or 
equivalent  in  Computer  Science 
or  related  field  and  two  years 
experience  as  a  software  engi¬ 
neer  or  computer  programmer, 
knowledge  of  VB.NET,  ASP 
NET,  SAP,  DB2,  XML  and  XSLT. 
Salary:  $70, 242/year.  Working 
Conditions:  8:00  A.M.  to  5:00 
P.M.,  40  hours/week,  involves 
extensive  travel  and  frequent 
relocation.  Apply:  Manager,  But¬ 
ler  County  CareerLink,  Pullman 
Commerce  Center,  112  Holly¬ 
wood  Drive,  Suite  101,  Butler, 
PA  16001,  Job  No.  WEB399793. 


Supplier  Portal  Application 
Leader.  Req.  Master's  deg.  in 
Bus.  Admin,  Int'l  Mgmt.,  or  C.S. 
&  2  years'  exp.  in  the  job  offered 
or  2  years'  exp.  in  devel.  & 
implem.  of  global  supply  chain 
process  improv.  technologies  in 
the  automotive  compon.  mfg. 
industry.  All  stated  exp.  must 
include  each  of  the  following: 
leadership  of  technology 
improvement  projects  budgeted 
at  in  excess  of  $75,000;  training 
employees  in  the  use  of  soft¬ 
ware  applications;  and  applica¬ 
tion  of  Data  Universal  Numb¬ 
ering  System  (DUNS)  hierarchy. 
Manage  the  development  & 
implementation  of  global  supply 
chain  process  improvement 
technologies  in  the  automotive 
component  manufacturing 
industry.  40  hrs./wk.  Apply  with 
resume  to:  Anna  Voeffray, 
Delphi  Corporation,  Mail  Code: 
480-410-122,  5825  Delphi  Drive, 
Troy,  Ml  48098. 


SENIOR  SYSTEMS  ANALYST 
to  analyze,  design,  develop, 
implement  and  test  software  for 
business  applications  using 
J2EE,  SQL,  Oracle,  JSP,  Web¬ 
Sphere  Application  Server,  Vis¬ 
ual  Age  for  Java,  XML,  XSLT, 
Java  Script,  Java  Beans,  TOAD, 
SQL  Plus  and  Edit  Plus  under 
UNIX  and  Windows  2000  oper¬ 
ating  systems.  Require:  Bach¬ 
elor’s  degree  in  Computer  Sci¬ 
ence/Programming,  Business 
Admin,  or  a  closely  related  field 
with  2  yrs  of  exp  in  the  job 
offered  or  as  a  Programmer/ 
Analyst,  or  Software  Engineer. 
Extensive  travel  on  assignment 
to  various  client  sites  within  the 
U.S.  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to:  Ravi  Kandimalla,  President, 
Everest  Computers  Inc.,  875 
Old  Roswell  Road,  Suite  E  400, 
Roswell,  GA  30076;  Attn:  Job 
AK. 


Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of  des¬ 
ign;  direct  software  system  test¬ 
ing  procedures  using  expertise 
in  WebSphere,  BO,  J2EE,  RUP, 
Scrum,  Oracle  8i  and  Sales 
Logix.  Requirements:  Bachelor’s 
Degree  or  equivalent  in  Comput¬ 
er  Science  or  related  field  and 
two  years  experience  as  a  soft¬ 
ware  engineer  or  computer  pro¬ 
grammer,  knowledge  of  Web¬ 
Sphere,  BO,  J2EE,  RUP,  Scrum, 
Oracle  8i  and  Sales  Logix. 
Salary:  $80, 000/year.  Working 
Conditions:  8:00  A.M.  to  5:00 
P.M.,  40  hours/week,  involves 
extensive  travel  and  frequent  re¬ 
location.  Apply:  Fayette  County 
CareerLink,  Attn:  CareerLink 
Program  Supervisor,  135  Way- 
lan  Smith  Drive,  Uniontown,  PA 
15401,  Job  No.  WEB399307. 


Software  engineer  to  design,  de¬ 
velop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of  de¬ 
sign;  direct  software  system 
testing  procedures  using  exper¬ 
tise  in  i2  Demand  Planning,  i2 
Supply  Chain  Planning  and  JD 
Edwards.  Requirements:  Bach¬ 
elor's  Degree  or  equivalent  in 
Computer  Science  or  related 
field  and  two  years  experience 
as  a  software  engineer  or  com¬ 
puter  programmer,  knowledge  of 
i2  Demand  Planning,  i2  Supply 
Chain  Planning  and  JD 
Edwards.  Salary:  $70, 242/year. 
Working  Conditions:  8:00  A.M. 
to  5:00  P.M.,  40  hours/week, 
involves  extensive  travel  and 
frequent  relocation.  Apply:  Site 
Manager,  Armstrong  County 
Career  Link,  1270  North  Water 
Street,  PO  Box  759,  Kittanning, 
PA  16201,  Job  No.  WEB399584. 


SENIOR  PROGRAMMER/ANA¬ 
LYST  to  analyze,  design,  devel¬ 
op  and  test  eBusiness  applica¬ 
tion  software  using  Object 
Oriented  programming,  Java,  C, 
Visual  Basic,  Siebel  Developer 
tools,  Oracle,  MS  SQL  Server 
and  IBM  DB2  databases  on  AIX 
and  Sun  Solaris  platforms;  Write 
automated  test  scripts  using 
QuickTest  Pro.  Require:  B.S. 
degree  in  Computer  Science/ 
Engineering,  or  a  closely  related 
field  with  2  yrs  of  exp  in  the  job 
offered.  Extensive  travel  on 
assignments  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  salary  offered. 
Send  resume  to:  Sundeep 
Chaudhry,  Elite  Solutions,  Inc., 
1670  Reserve  Way,  Ste  203, 
Decatur,  GA  30033;  Attn:  Job 
MA. 


Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of  de¬ 
sign;  direct  software  system 
testing  procedures  using  exper¬ 
tise  in  Oracle  Forms,  Oracle, 
Informix  4GL,  Erwin  and  PL/ 
SQL.  Requirements:  Bachelor's 
Degree  or  equivalent  in  Com¬ 
puter  Science  or  related  field 
and  two  years  experience  as  a 
software  engineer  or  computer 
programmer,  knowledge  of 
Oracle  Forms,  Oracle,  Informix 
4GL,  Erwin  and  PL/SQL.  Salary: 
$70, 242/year.  Working  Condi¬ 
tions:  8:00  A.M.  to  5:00  P.M.,  40 
hours/week,  involves  extensive 
travel  and  frequent  relocation. 
Apply:  Mon  Valley  Regional 
CareerLink,  Attn:  Actg.  CL 
Program  Supervisor,  Donora 
Industrial  Park,  570  Galiffa 
Drive,  Donora,  PA  15033,  Job 
No.  WEB399701. 


SYSTEMS  ENGINEER 

Specify,  design,  code,  test  and 
maintain  systems  software  used 
by  company  application  in  the 
UNIX  environments  of  Sun  Sol¬ 
aris,  IBM,  AIX.  Track  UNIX 
technology  directions  and  en¬ 
sure  that  company  products  are 
tailored  appropriately  for  the 
UNIX  environment.  C  tree  ex¬ 
perience  and  knowledge  of 
UNIX  systems  services:  threads, 
daemon  processes,  signals  and 
client-server  architectures.  Must 
carry  a  beeper  and  travel  up  to 
50%  of  the  time.  A  bachelor’s 
degree  or  equivalent  in  Com¬ 
puter  Science  or  related  field. 
Five  years  of  experience  in  job 
offered  or  related  occupation. 
40  hours  per  week  8:00  a.m.  to 
5:00  p.m.,  $66, 200/year.  Must 
have  proof  of  legal  authority  to 
work  in  the  United  States.  Send 
your  resume  to  Madhavi 
Bhadbhade,  Nebraska  Depart¬ 
ment  of  Labor,  P.O.  Box  94600, 
Lincoln,  NE  68509.  Refer  to 
Job  Order  TREL5-WJLFF- 
96518.  This  advertisement  is 
paid  for  by  the  employer. 


Next  Generation  Profession¬ 
als  are  hiring  all  levels/multi¬ 
ple  positions  of  Oracle  Ap¬ 
plication  DBAs  and  other  IT 
Professionals.  Senior  Level 
Oracle  Application  DBAs' 
require  Masters/equiv  and  3 
yrs  of  exp  or  Bach/equiv  and 
5  yrs  exp.  Job  location: 
Tustin,  CA,  but  may  be 
placed  at  client  sites  nation¬ 
wide.  Send  resumes  to  PO 
Box  3943,  Tustin,  CA  92781- 
3943. 


Enternet  Inc.  has  openings  for 
experienced  Computer  Prof¬ 
essionals  w/relevant  education 
and  experience  in  Siebel, 
Informatica,  Brio,  Business 
Objects,  Cognos,  Tibco.QA, 
WinRunner,  Unix/NT/Cisco 
Admin,  C#,  VB,  .NET,  Java, 
EJB,  C,  C++,  PeopleSoft,  SAP, 
Oracle  Apps.  RDBMS/  DBA 
(Oracle,  Sybase,  SqIServer, 
DB2),  Cobol:  Data  Modeling, 
Project  Manager.  40%  travel  to 
client  sites.  Send  to:  Entemet 
Business  Systems,  Inc.  650 
Grand  Canyon  Drive,  Madison, 
Wl  53719  OR  505  Thomall  St, 
Suite  304,  Edison,  NJ  08837 


Info-X,  Inc.  has  opening  for 
Quality  Assurance  Engineer 
w/Masters  in  Comp  Applns  &  at 
least  3  yrs  exp  in  testing.  Dsgn  & 
dvlp  test  cases,  test  plans  & 
workflow  systms,  dsgn  &  exe¬ 
cute  coverage  tests,  black  box  & 
white  box  tests,  write  dsgn  docs, 
HLD  &  LLD,  define  QA  metrics  & 
perform  automated  functional, 
data  driven,  regression  &  stress 
testing;  use  Visual  SourceSafe 
for  version  control,  Ingres, 
Oracle,  LoadRunner,  Silk  Test, 
Visual  C++,  ODBC,  HTML,  XML, 
&  ReportWriter  on  Unix,  Linux  & 
Win  NT  Platform.  Must  have 
legal  auth  to  work  in  US.  Mail 
resume  w/proof  of  work  status 
to:  jobs@info-x-inc.com 


International  Programming  & 
Systems,  Inc.  has  opportunities 
for  Analyst/Programmers  with 
these  skills:  Visual  Basic  6.0; 
Visual  C++;  C#;  Javascript; 
VBScript;  ASP;  SQL  Server; 
HUON,  Oracle  HRMS;  Oracle 
Apps  1 1  i;  MQ  Series;  MQSI; 
Oblix  Identity  Mgmt;  Corillian 
Voyager.  Positions  are  nation¬ 
wide  inc.  Seattle,  WA,  NJ  and 
CA.  IPS  also  has  Sales  and 
Recruiting  positions  in  our  S.F. 
office.  E-responses  are  encour¬ 
aged,  cflavell@ipsamerica.com 
or  mail  to  IPS,  1875  So.  Grant 
Street,  #300,  San  Mateo,  CA 
94402  (Fax)  650-572-8679. 
Principals  only  please. 


Programmer  Analyst 

IMicro/Web)  - 
Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance 
and  support  of  integrated  client- 
server  based  systems  for  busi¬ 
ness,  financial,  banking,  manu¬ 
facturing  and  other  commercial 
business  application  systems  in 
a  multi-hardware/multi-software 
environment  using  centralized  or 
distributed  relational  database 
management  systems,  4GLs 
(Fourth  Generation  Languages) 
and  other  GUI  (Graphical  User 
Interface)  front-end  tools.  Analy¬ 
sis,  design  and  development  of 
client-server  applications  using 
object-oriented  methodology. 
Bachelor’s  Degree  (or  equiva¬ 
lent)  in  Computer  Science- 
Math/Engineering/Science/Busi 
ness-Commerce  and  1  yr.  expe¬ 
rience  in  job  offered  or  as 
Software  Engineer/Systems  An¬ 
alyst  are  required.  Must  have 
appropriate  combination  of  skills 
as  follows:  1  of  A  and  2  of  B;  or 
2  of  A  and  1  of  B;  or  3  of  A.  A 
includes  Oracle,  Sybase,  Infor¬ 
mix,  SQL  Server,  Progress, 
Ingres,  Access  and  Proxy  Ser¬ 
ver;  and  B  includes  Power¬ 
Builder,  Visual  Basic,  MS- 
Windows,  Visual  C++,  JAM, 
APT-SQL,  SQL*FORMS,  ESQL/ 
C,  GUPTA  SQL,  Progress  4GL, 
Informix  4GL,  Ingres  4GL,  C, 
Java,  Lotus  Notes,  HTML,  CGI, 
IIS,  ASP,  Front  Page,  Peri  and 
Java  Development  Kit  (JDK); 
High  mobility  preferred.  40 
hrs/week,  8  am  -  5  pm.  $67,995 
-  $78,000  per  year.  Qualified 
applicants  should  contact  or 
send  resume  to  BECS/Career- 
Link  Program  Supervisor, 
Indiana  County  CareerLink,  300 
Indian  Springs  Road,  Indiana, 
PA  15701.  Refer  to  Job  Order  # 
WEB  398467. 


Programmer  Analyst 
(PeopleSoft  Specialist)  - 
Multiple  Openings 

Structured  systems  analysis, 
design,  development,  modifica¬ 
tion,  testing,  quality  assurance, 
implementation,  integration, 
maintenance  and  support  of 
large  volume  online  complex 
integrated  client-server  based 
financial  and  human  resource 
management  application  sys¬ 
tems  in  a  multi-hardware/multi- 
software  environment  using  cen¬ 
tralized  or  distributed  Relational 
Database  Management 

Systems  (RDBMS)  such  as 
DB2,  Oracle,  Sybase,  SQL 
Server,  SQL  Base  and  related 
software.  Bachelor’s  Degree  (or 
equivalent)  in  Computer 
Science-Math/Engineering/ 
Science/Business-Commerce 
and  1  yr.  experience  in  job 
offered  or  as  Programmer 
Analyst/Systems  Analyst  are 
required.  Must  have  appropriate 
combination  of  skills  as  follows: 
1  of  A  and  3  of  B.  A  includes 
PeopleSoft  Financials,  People- 
Soft  Human  Resource  Manage¬ 
ment  and  B  includes  People- 
Tools,  PeopleCode,  SQR, 
Crystal  Reports,  COBOL;  High 
mobility  preferred.  40  hrs/week, 
8  am  -  5  pm.  $67,995  -  $78,000 
per  year.  Qualified  applicants 
should  contact  or  send  resume 
to:  Site  Administrator,  Greene 
County  CareerLink,  4  West  High 
Street,  Waynesburg,  PA  15370- 
1 324.  Refer  to  Job  Order  #  WEB 
398907. 


Vega,  a  NJ  based  computer 
consulting  company,  is  currently 
staffing  for  long  term  stimulating 
projects  throughout  the  US.  We 
are  hiring  professionals  with  any 
of  the  following  skills:  Oracle 
9i/AS,  Siebel  EIM/ETL  Designer, 
Siebel  Middleware  Integration 
Expert,  Changeman,  SAP/Basis 
Lead  Architect,  SAP/Basis- 
Administrator,  PowerBuilder, 
Java/EJB,  Cobol/DB2,  AS/400, 
C++,  VB.  Please  submit  res¬ 
umes  to: 

pperanio@vegaconsulting.com 
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SQL  Server 

chitect  at  Tacoma,  Wash.- 
based  Labor  Ready  Inc. 

Gilbert  said  the  temp-labor 
services  firm  had  hoped  to 
start  using  Yukon  this  year  to 
take  advantage  of  the  integrat¬ 
ed  Visual  Studio  tools,  plus 
new  features  for  large  databas¬ 
es.  But  Gilbert  said  the  first 
beta  release  of  Yukon  still 
needed  a  lot  of  work.  For  in¬ 
stance,  he  said,  several  work¬ 
bench  management  tool  fea¬ 
tures  weren’t  activated  yet. 

Customers  Respond 

Larry  Godec,  CIO  at  First 
American  Title  Insurance  Co. 
in  Santa  Ana,  Calif.,  said  he 
fired  off  a  note  to  Microsoft  as 
soon  as  he  learned  about  the 
new  delay.  First  American 
uses  SQL  Server  2000  to  run  a 
homegrown  title  and  escrow 
transaction  system  for  10,000 
users  in  1,200  offices.  The 
database  server  has  to  be  shut 
down  for  more  than  14  hours 
every  time  the  company  rein¬ 
dexes  the  system.  But  Yukon  is 
supposed  to  allow  mainte¬ 
nance  while  the  database  is 
online,  Godec  said. 

“My  note  to  Microsoft  was, 
‘If  it’s  going  to  be  delayed  to 
2005,  you  need  to  figure  out 
how  you  get  that  functionality 
into  SQL  2000  for  us,’  ”  he  said. 

Don  Watters,  data  group 
manager  at  film  processor  Pho¬ 
to  Works  Inc.  in  Seattle,  said, 
“I’ve  been  touting  [Yukon’s] 
abilities  to  so  many  people 
here  and  in  other  organizations 
that  I’d  like  to  actually  be  able 
to  show  them  that  it’s  going  to 
become  a  reality  someday.” 

Watters  said  he  fears  that 
the  SQL  Server  team’s  contin¬ 
ued  focus  on  Yukon  means  it 
won’t  devote  much  attention 
to  fixing  bugs  in  SQL  Server 
2000.  But  he  hopes  Microsoft 
will  take  advantage  of  the  de¬ 
lay  to  correct  such  things  as 
security  flaws  before  shipping 
the  upgrade. 


Yukon,  which  Microsoft 
said  will  be  called  SQL  Server 
2005,  will  add  64-bit  support 
and  enhancements  in  areas 
such  as  scalability  and  securi¬ 
ty.  The  software  was  originally 
due  out  last  year  but  was  de¬ 
layed  until  the  middle  and 
then  the  end  of  this  year. 

Tom  Rizzo,  director  of  prod¬ 
uct  management  for  SQL 
Server,  said  the  upgrade  was 
delayed  yet  again  because  of 
feedback  from  users  and  part¬ 
ners  that  have  tested  the  soft¬ 
ware.  “In  the  database  world, 
you  can’t  release  a  poor  prod¬ 
uct,”  he  said.  “We  aren’t  date- 
driven;  we’re  quality-driven.” 

A  second  Yukon  beta  re¬ 
lease  is  scheduled  to  become 
available  in  the  next  few 
months,  along  with  the  first 
test  version  of  Whidbey.  But 
Rizzo  said  the  Yukon  beta  still 
won’t  have  all  the  promised 
functionality  and  will  be  fol¬ 


lowed  later  this  year  by  the 
third  beta,  which  will  be  run 
in  production  by  a  group  of 
about  15  customers.  “There  are 
a  lot  of  areas  we  want  them  to 
test  it  [in]  in  the  real  world,” 
he  added,  citing  as  examples 
Yukon’s  data  management,  us¬ 
ability,  security  and  developer 
productivity  features. 

SQL  Server  2000  will  be 
nearly  five  years  old  by  the 
time  Yukon  ships.  Microsoft  is 
taking  “an  insanely  long  time 
between  major  database  re¬ 
leases,”  said  Mark  Shainman, 
an  analyst  at  Meta  Group  Inc. 
“It’s  getting  comical.”  He  not¬ 
ed  that  Oracle  Corp.  has  come 
out  with  both  the  9i  and  lOg 
versions  of  its  database  in  the 
same  amount  of  time. 

Some  users  aren’t  getting 
anxious.  “In  terms  of  the  delay, 
it  will  not  impact  us  in  a  major 
way,”  said  Kirk  Pothos,  a  soft¬ 
ware  development  manager 
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M  It  won’t  be 
longer  [than 
late  2004]....  We’re 
really  locked  down. 

The  SQL  Server  team 
is  a  pretty  well  disci¬ 
plined  team.  There’s 
not  a  lot  of  unknowns. 

PAUL  FLESSNER,  SENIOR  VICE 
PRESIDENT  OF  MICROSOFT'S 
SERVER  PLATFORM  DIVISION 


In  the  database 
world,  you  can’t 
release  a  poor  product. 
We  aren’t  date-driven; 
we’re  quality-driven. 

TOM  RIZZO,  DIRECTOR  OF 
PRODUCT  MANAGEMENT  FOR 
SQL  SERVER 


Delay  Raises  Questions  About 
Software  Assurance  Contracts 


Microsoft's  disclosure  that  the  re¬ 
lease  date  tor  Yukon  has  slipped 
again  gave  some  SQL  Server 
users  even  more  to  think  about 
than  the  potential  impact  on  their 
IT  project  plans. 

Many  Microsoft  server  cus¬ 
tomers  signed  contracts  for  the 
Software  Assurance  program  that 
the  company  introduced  in  October 
2001,  paying  an  annual  amount 
equal  to  25%  of  their  upfront  li¬ 
cense  fees.  The  contracts  cover 
two  or,  more  typically,  three  years, 
and  customers  gain  the  rights  to 
the  upgrades  of  the  covered  prod¬ 
ucts  released  during  that  time. 

Microsoft  last  September  en¬ 
hanced  Software  Assurance  by 
adding  support  and  training  op¬ 
tions,  as  well  as  home-use  rights 
for  Office.  But  the  latest  delay  of 
Yukon  will  likely  mean  some  SQL 
Server  users  won’t  get  an  upgrade 
before  their  initial  contracts  expire. 

Tm  certainly  disappointed,” 


said  Larry  Godec,  CIO  at  First 
American  Title  Insurance.  Godec 
said  he  “absolutely”  expected  that 
there  would  be  a  SQL  Server  re¬ 
lease  during  his  company’s  three- 
year  enterprise  agreement  with 
Microsoft,  which  has  Software  As¬ 
surance  built  in  and  is  due  to  ex¬ 
pire  next  year. 

He  added  that  he  will  take  the 
additional  delay  on  the  database 
into  account  when  he  decides 
whether  to  renew  the  contract  for 
his  server  software. 

“We  didn’t  purchase  Software 
Assurance  earlier,  and  it  would  be 
a  difficult  sell  after  this,”  said  Keith 
Gilbert,  an  enterprise  data  archi¬ 
tect  at  Labor  Ready. 

Gilbert  said  Microsoft  marketed 
Software  Assurance  as  an  “up¬ 
grade  process"  when  it  started  the 
program.  “It  wasn’t  marketed  as 
support,  which  a  lot  of  people  have 
through  TechNet,  MSDN  or  what¬ 
ever  else,"  he  said. 


“The  misconception  out  there  is 
that  Software  Assurance  is  just 
about  upgrades,”  said  Sunny 
Charlebois,  a  product  manager  for 
woridwide  licensing  and  pricing  at 
Microsoft.  She  said  Microsoft  has 
worked  hard  to  help  customers  un¬ 
derstand  the  value  of  Software 
Assurance  and  commissioned 
Forrester  Research  Inc.  to  develop 
a  tool  to  calculate  the  return  on 
investment. 

But  Alvin  Park,  an  analyst  at 
Gartner  Inc.,  said  that  he’s  not 
convinced  users  “see  enough 
added  value  above  and  beyond  a 
potential  upgrade  to  want  to  buy 
Software  Assurance.” 

Forrester  analyst  Julie  Giera  said 
many  of  her  clients  are  approach¬ 
ing  renewal  dates  for  Software  As¬ 
surance  in  the  next  four  months. 
The  timing  of  the  delay  “is  certainly 
going  to  present  Microsoft  with 
some  difficulty,”  Giera  said.  “SQL 
Server  customers  especially 
should  be  trying  to  get  concessions 
from  Microsoft.” 

Users  aren’t  forced  to  buy  Soft¬ 
ware  Assurance  and  aren’t  guar- 


at  Xerox  Global  Services  Inc. 

Pothos  said  he’s  interested 
in  some  of  Yukon’s  features, 
including  database  adminis¬ 
tration  improvements.  But,  he 
added,  “we  always  build  some 
leeway  into  our  schedule  for 
such  things.” 

However,  a  database  ser¬ 
vices  manager  at  an  interna¬ 
tional  cosmetics  manufacturer 
and  retailer  said  his  company’s 
developers  will  have  to  scrap 
plans  to  write  a  sales  force  ap¬ 
plication  on  top  of  Yukon  and 
Whidbey.  The  application  has 
to  be  ready  later  this  year,  so 
the  developers  will  use  the 
current  versions  of  Visual  Stu¬ 
dio  and  SQL  Server,  said  the 
IT  manager,  who  asked  not  to 
be  identified.  “I  applaud  [Mi¬ 
crosoft]  for  not  taking  a  step 
backward  by  putting  out  a 
product  that’s  not  ready,”  he 
added.  “But  that  doesn’t  mean 
I’m  happy  about  it.”  ©  45400 


anteed  an  upgrade,  said  Tom  Riz¬ 
zo,  director  of  product  manage¬ 
ment  for  SQL  Server.  He  added 
that  Microsoft  will  continue  to  en¬ 
hance  Software  Assurance  and 
consider  extending  support  for 
older  versions  of  SQL  Server.  Cur¬ 
rently,  mainstream  support  is  due 
to  end  Dec.  31, 2005,  for  SQL 
Server  2000  and  SQL  Server  7. 

Park  said  Gartner  has  been 
pushing  Microsoft  to  offer  guaran¬ 
teed  upgrades  as  part  of  Software 
Assurance,  but  Microsoft  has 
balked,  noting  that  no  other  ven¬ 
dors  do  anything  similar. 

“We  can’t  run  a  business  and 
do  that,”  Charlebois  said. 

Steve  Sommer,  CIO  at  law  firm 
Hughes  Hubbard  &  Reed  LLP  in 
New  York,  said  he  has  already  put 
the  cost  of  a  Software  Assurance 
contract  into  his  2005  budget. 
Sommer  said  he  likes  the  new 
support  options  and  isn’t  worried 
about  upgrades  because  he  has 
“a  very  strong  feeling”  that  Mi¬ 
crosoft  will  compensate  loyal 
users. 

-  Carol  Sliwa 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 


ISPs’  Spam  Fight 


CALL  IT  THE  REVOLT  of  the  ISPs.  Last  week,  the  four 
biggest  U.S.  Internet  service  providers  —  America  On¬ 
line,  EarthLink,  Microsoft  and  Yahoo  —  filed  six  law¬ 
suits  against  high-volume  spammers.  The  lawsuits  tar¬ 
get  several  big-time  spammers  by  name,  along  with 
hundreds  of  “John  Does”  —  that  is,  spammers  to  be  named  later. 

Meanwhile,  news  also  surfaced  that  broadband  provider  Comcast 
has  been  cutting  off  Internet  service  for  some  customers  whose 
computers  are  being  used  to  relay  spam  messages. 

What  gives  here?  Has  the  whole  ISP  world  suddenly  gone  sane? 


OK,  let’s  be  fair:  This  surge  of  antispam  sani¬ 
ty  isn’t  that  sudden.  Some  big  ISPs  have  been 
filtering  out  spam  for  years,  using  tools  such  as 
the  Realtime  Blackhole  List  of  spam  sources 
maintained  by  Mail  Abuse  Prevention  System 
LLC.  In  fact,  for  some  ISPs,  spam  prevention 
has  become  a  selling  point. 

And  it’s  not  out  of  altruism  or  good  citizen¬ 
ship.  Spam  costs  ISPs  bandwidth,  which  trans¬ 
lates  into  money.  And  the  ISPs’  users  hate  spam, 
so  less  spam  means  happier  customers. 

But  last  week’s  round  of  lawsuits  clearly  kicks 
the  ISPs’  antispam  efforts  up  a  notch.  Who’d 
have  thought  the  tortuously  named  CAN-SPAM 
law  (for  “Controlling  the  Assault  of  Non-So- 
licited  Pornography  and  Marketing”),  which 
went  live  in  January,  would  be  more  than  wish¬ 
ful  thinking  for  dealing  with  spam? 

Even  more  noteworthy  is  Comcast’s  decision 
to  pull  the  plug  on  customers  whose  PCs  have 
been  turned  into  spam  zombies.  Unlike  the 
spammer-suing  ISPs,  Comcast  is  shutting  down 
its  own  customers  and  risking  their  wrath. 

But  huge  numbers  of  Comcast’s  cable  broad¬ 
band  customers  are  naive  home  users  with  no 
firewalls  or  virus  protection,  whose  PCs  are 
continuously  connected  to  the  In¬ 
ternet,  making  them  prime  targets 
for  worms  that  will  use  them  to  re¬ 
lay  spam.  Going  after  its  customers 
may  be  the  only  way  for  Comcast  to 
protect  its  network. 

If  Comcast  spots  signs  that  a  cus¬ 
tomer’s  PC  is  pumping  out  spam, 

Comcast  issues  a  warning.  If  the 
customer  doesn’t  clean  up  the  prob¬ 
lem,  Comcast  cuts  off  service. 

For  corporate  IT  shops  struggling 
against  a  constant  flood  of  spam  — 
much  of  it  generated  by  broadband- 
connected  home  users  —  that’s 
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good  news.  Except  that  it’s  bad  news,  too. 

Why?  Because  some  of  the  users  cut  off  by 
Comcast  —  and  other  broadband  providers,  if 
they  follow  suit  —  are  likely  to  be  our  users. 

You  know  the  ones.  They  turn  off  antivirus 
software,  circumvent  firewalls  and  work  around 
security  procedures.  They’re  security  disasters 
looking  for  a  place  to  happen.  At  work,  we  pro¬ 
tect  them  from  themselves.  At  home,  we  can’t, 
and  they’re  bound  to  get  into  trouble. 

But  when  hapless  executives  and  other  em¬ 
ployees  discover  they  can  no  longer  use  the  In¬ 
ternet  to  work  from  home  because  their  broad¬ 
band  providers  have  cut  them  off,  our  help 
desks  will  still  have  to  field  the  calls  and  clean 
up  the  mess. 

That  means  we’d  better  get  ready.  And  we 
can  start  by  spelling  out  for  our  users  just  what 
might  happen. 

We  can  explain  that  broadband  providers  are 
getting  serious  —  even  heavy-handed  —  about 
dealing  with  customers  whose  PCs  are  infected 
with  spam-generating  worms.  We  can  warn  that 
their  broadband  service  might  be  cut  off  if  they 
don’t  have  antivirus  and  firewall  software. 

And  we  can  tell  our  users  what  to  do  if  their 
broadband  providers  warn  them 
about  being  spam  relays.  We  can 
help  clean  up  the  problem  so 
they’ll  stay  connected  —  but  only  if 
they  act  immediately  when  they 
get  a  warning.  If  they  wait  until 
their  service  is  cut  off,  it’ll  be  hard¬ 
er  to  straighten  out. 

Sure,  walking  users  through  all 
that  is  a  pain.  And  it  shouldn’t  real¬ 
ly  be  necessary. 

But  it’s  the  price  our  IT  shops 
will  have  to  pay  if  we  want  to  get 
the  benefits  of  this  ISP  antispam 
revolt.  O  45380 


From  Bad  to  Worse 


When  this  24/7  server  loses  a  disk  drive,  an  alarm 
starts  beeping  to  warn  sysadmins  to  replace  the  drive 
in  the  RAID  array.  New  disk  will  be  installed  in  24 
hours,  says  pilot  fish,  but  meanwhile  the  boss  com¬ 
plains  about  the  noise.  “Can  it  be  stopped?"  he  asks. 
Not  without  a  reboot,  fish  says.  “No  way  we  can  afford 
the  downtime,”  boss  says.  “But  could  you  get  a  pair  of 
wire  cutters  and  take  care  of  the  beeping?" 


Physician, 

Heal  Thyself 

A  virus  is  wreak¬ 
ing  havoc  at  the 
main  office  of 
this  hospital  group,  so 
IT  manager  personally 
prepares  antivirus  disks 
for  13  clinics.  Just  one 
problem:  “All  13  disks 
had  a  virus  on  them,  be¬ 
cause  he  had  the  virus 
on  his  own  PC,”  sighs 
local  pilot  fish.  “None  of 
these  field  units  was 
infected  until  they  got 
his  disk.” 


SHARK 

TANK* 


What  a  Surprise 

Network  controller  goes 
down,  and  so  does  this 
bank’s  entire  ATM  net¬ 
work,  so  pilot  fish  gets 
called  in  to  troubleshoot. 
She  soon  realizes  this 
won’t  be  a  quick  fix,  so 
she  reluctantly  calls  her 
fiancd  to  tell  him  that 
she  won’t  make  their 
dinner  date.  “That’s 
OK,”  he  grumbles.  “The 
dam  ATM  was  down,  so 
I  couldn’t  get  any  money 
for  dinner  anyway!” 


But  It  IVas  a  PC 

User  tells  new-hire  sup¬ 
port  pilot  fish  that  he  has 
a  business  card  stuck  in 
his  PC’s  CD-ROM  drive. 
“Don’t  take  his  word  for 
it  until  you  see  what  it 
is,”  says  fish's  boss. 
Wise  advice.  “The  user 
had  received  a  presen¬ 
tation  on  a  CD  shaped 
like  a  business  card,” 


says  fish.  But 
why  was  it 
stuck  in  the 
CD-ROM  drive? 
It  wasn’t.  “He 
got  it  stuck  in  the  floppy 
drive!” 


Room  Service 

After  pilot  fish  coughs 
up  $11.95  for  broadband 
access  at  this  Silicon 
Valley  hotel,  his  PC’s 
firewall  announces  that 
it’s  blocking  probes  at  an 
alarming  rate.  “I  used 
the  Windows  Network 
Neighborhood  and  real¬ 
ized  I  could  see  the  com¬ 
puters  -  by  name  -  of 
other  hotel  guests,”  fish 
says.  “I  was  just  glad  I 
had  a  firewall  and  was 
paying  attention!” 


Close  Enough 

At  least  once  a  month, 
this  manager  complains 
he  can’t  access  his  lap¬ 
top’s  encrypted  hard 
drive  because  “they” 
changed  his  password. 
After  several  rounds  of 
using  the  emergency 
password  to  recover  the 
drive,  sysadmin  pilot  fish 
asks  what  the  manager 
changed  his  password 
to.  I  didn’t  change  it, 
says  manager  -  “they” 
did.  “I  typed  in  the  origi¬ 
nal  password,”  fish  says. 
“Amazingly,  it  was  ac¬ 
cepted.  I  handed  the  ma¬ 
chine  back,  saying  I  re¬ 
set  the  password  to  the 
original.” 


OFEED  THE  SHARK!  Send  your  true  tales  of  IT  life  to 
sharky@computerworid.com.  You  snag  a  snazzy 
Shark  shirt  if  we  use  it.  And  check  out  the  daily  feed,  browse 
the  Sharkives  and  sign  up  for  Shark  Tank  home  delivery  at 

computerwortd.com/sharky. 


Call:  877-878-3256 

Go  to:  www.gateway.com/corp/cmpwrd 


All  offers  sublet  to  change  without  notice  or  obligation  and.  may  not  be  available  through  all  sales  channels.  Prices  exclude  shipping  and  handling. 
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Professional 


Gateway®  servers  are  the 
no-risk  policy  for  the 
California  Department 

of  Insurance. 


Gateway®  975  Series 


2U,  High-Availability  Server 

•  Dual  Intel®  Xeon™  Processor  capable 

•  Up  to  1 2GB  PC2 1 00  ECC  SDRAM 

•  Six  64-bit  PCI-X  Slots 

•  3-Yr.  Parts/Labor  Limited  Warranty/ 
3-Yr.  Next  Business  Day  On-Site1 

•  FCC  Class  A  Compliant2 


$2,199.00 


Gateway®  840  Serial-ATA 
RAID  Enclosure 


2U  Rack  optimized  Storage  Chassis 

•  Scales  up  to  2TB  for  under  $6,000 
or  3TB  for  under  $7,200 

•  Hot-swappable  SATA  7200  RPM  Hard  Drives3 

•  Integrated  SATA  RAID  Controller 

•  3-Yr.  Parts/Labor  Limited  Warranty/ 

3-Yr.  Next  Business  Day  On-Site1 


$3,999.00 


. 

‘We  standardized  on  Gateway  because  in  the 
end,  it  all  comes  down  to  support  and  cost. 

With  Gateway  we  get  the  best  of  both  •”  IS® 


••  .'V;  v  ‘  ■  ‘  *  V H 

Jesse  Castillo,  Network  Support  Manager 


California  Department  of  Insurance 


Gateway  listened  to  the  problems  facing  the  California 
Department  of  Insurance. Their  14,000  employees  said  e-mail 
was  fast  becoming  the  most  vital  communication  method  for 
agents,  companies,  and  the  public.  However,  their  e-mail 
system  was  outdated. 


The  solution?  Three  sets  of  clustered  servers  with  Intel®  Xeon 
Processors  to  deliver  faster  response  by  removing  bottlenecks 
and  balancing  unpredictable  processing  loads,  while  providing 
high  system  uptime. 


Now  they  have  an  e-mail  system  that  delivers  increased 
productivity  and  reliability  with  only  9  servers — instead  of  14. 


To  find  out  why  our  server  and  storage 
technology  is  a  better  business  policy, 
call  your  Gateway  representative. 

We’re  listening. 


Gateway  Technology 
Lifecycle  Services 

Gateway  can  support  your  technology 
needs,  no  matter  where  your  agency  is 
in  the  technology  lifecycle. 


Award-Winning  Gateway 
Customer-Centric  Support 

Gateway  has  teamed  with  IBM®  Global 
Services  to  provide  phone  and  next 
business  day,  4-hour,  and  2-hour 
on-site  support.1 
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Oracle  Database  10 g 

$149  Per  User 


One  CD 

17  minute  install 
Easy  to  use 


Oracle  Standard  Edition  One 
$149  per  user  or  $4995  per  processor 
First  class  database . . .  economy  price 


oracle.com/standardedition 
or  call  1.800.633.0753 


Limitations  and  restrictions  apply.  Standard  Edition  One  is  available  with  Named  User  Plus  licensing  at  $149  per  user  with  a  minimum  of  five  users  or  $4995  per 
processor.  Licensing  of  Oracle  Standard  Edition  One  is  permitted  only  on  servers  that  have  a  maximum  capacity  of  2  CPUs  per  server.  17  minute  install 
is  based  upon  testing  on  a  system  with  1x866MHz  Intel  CPU,  512  Mb  RAM  running  Red  Hat  Linux  2.1.  Actual  install  times  will  vary 
and  are  dependent  on  system  configurations.  For  more  information,  visit  oracle.com/standardedition 
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